Mr. Cl0wn - H4ck1ng C0d3r MrCl0wnLab

## checker_vuln_web.config.py
import os
import sys
import requests
import urllib3
from requests.exceptions import Timeout

urllib3.disable_warnings()

if sys.argv[1]:
    headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"}

## URL Spoofing_firefox.html
<!DOCTYPE HTML>
<html lang="en-US">
	<head>
		<meta charset="UTF-8">
		<title>URL Spoofing</title>
		<style>
			*{font-family:Mukta,sans-serif;color:#3b3b3b}small{color:gray;font-weight:400;font-style:italic;font-size:16px;margin-top:-20px;display:block;margin-bottom:30px}small strong{font-weight:600;font-size:18px;color:inherit}h2{margin-top:40px;color:#424242}
		</style>
		<script>
			onload = function() {

## Get_thumbnail_src_from_Instagram.html
<!DOCTYPE html>
<html>

  <head>
    <script data-require="jquery@3.0.0" data-semver="3.0.0" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.0.0/jquery.js"></script>
    <script src="script.js"></script>
    <link href="style.css" rel="stylesheet">
  </head>

  <body>

## Sender-mailgun.php
<?php
require_once('SenderMailgun.php');

# Open file key
$key = file_get_contents('key');

# Instantiate the client.
SenderMailgun::$api_key = $key;

# Data params email.

## blackmail.txt
---------- Forwarded message ---------
De: Jeanlou Zanella <huocleavlanddk@outlook.com>
Date: seg., 13 de abr. de 2020 às 16:35
Subject: jessiXXXXXXXXX : 44244JE
To: jessiXXXXXXXXX@gmail.com <jessiXXXXXXXXX@gmail.com>


Pa𝗒 $10𝟢𝟢 𝗂𝗇 𝖻tc 𝗍𝗈 𝗍𝗁𝖾 𝖽own 𝖻𝖾𝗅𝗈w 𝖺dd𝗋es𝗌:

bc1***qjma8cz8ry8lr5x3zc8w44cwthstxknr4lpzsdk

## file.txt
<script>alert(0)</script>
<script\x20type="text/javascript">javascript:alert(1);</script>
<script\x3Etype="text/javascript">javascript:alert(1);</script>
<script\x0Dtype="text/javascript">javascript:alert(1);</script>
<script\x09type="text/javascript">javascript:alert(1);</script>
<script\x0Ctype="text/javascript">javascript:alert(1);</script>
<script\x2Ftype="text/javascript">javascript:alert(1);</script>
<script\x0Atype="text/javascript">javascript:alert(1);</script>
'`"><\x3Cscript>javascript:alert(1)</script>
'`"><\x00script>javascript:alert(1)</script>

## cadastro.py
from random import shuffle


class Cadastro:
    ''' Recebe um cpf e gera um objeto Cadastro que possui um atributo para
    guardar o ticket definido a partir do cpf passado.
    '''

    def __init__(self, cpf):
        self.ticket = self.ticket_generator(cpf)

## GatheringEmailLinkedin.php
<?php
$targets = array_unique(explode("\n",file_get_contents("posts.targets")));
$user_agent = 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0';

foreach ($targets as $key => $url_target) {

   #REQUEST PEGANDO ID
   exec("curl -kg --user-agent '{$user_agent}' '{$url_target}'>tmp");

   #GREP  ID

## Movimentacao.cs
using System.Collections;
using System.Collections.Generic;
using UnityEngine;

public class Movimentacao : MonoBehaviour
{

    public Rigidbody rb;
    public Animator anim;
    public float moveSpeed = 20.0f;

## PHPProxyRequest.php
<?php

error_reporting(0);
set_time_limit(0);
ini_set('memory_limit', '1024M');
ini_set('display_errors', 0);
ini_set('max_execution_time', 0);
ini_set('allow_url_fopen', 1);
(!isset($_SESSION) ? session_start() : NULL);
	import os
	import sys
	import requests
	import urllib3
	from requests.exceptions import Timeout

	urllib3.disable_warnings()

	if sys.argv[1]:
	headers = {"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36"}
	<!DOCTYPE HTML>
	<html lang="en-US">
	<head>
	<meta charset="UTF-8">
	<title>URL Spoofing</title>
	<style>
	*{font-family:Mukta,sans-serif;color:#3b3b3b}small{color:gray;font-weight:400;font-style:italic;font-size:16px;margin-top:-20px;display:block;margin-bottom:30px}small strong{font-weight:600;font-size:18px;color:inherit}h2{margin-top:40px;color:#424242}
	</style>
	<script>
	onload = function() {
	<!DOCTYPE html>
	<html>

	<head>
	<script data-require="jquery@3.0.0" data-semver="3.0.0" src="https://cdnjs.cloudflare.com/ajax/libs/jquery/3.0.0/jquery.js"></script>
	<script src="script.js"></script>
	<link href="style.css" rel="stylesheet">
	</head>

	<body>
	<?php
	require_once('SenderMailgun.php');

	# Open file key
	$key = file_get_contents('key');

	# Instantiate the client.
	SenderMailgun::$api_key = $key;

	# Data params email.
	---------- Forwarded message ---------
	De: Jeanlou Zanella <huocleavlanddk@outlook.com>
	Date: seg., 13 de abr. de 2020 às 16:35
	Subject: jessiXXXXXXXXX : 44244JE
	To: jessiXXXXXXXXX@gmail.com <jessiXXXXXXXXX@gmail.com>


	Pa𝗒 $10𝟢𝟢 𝗂𝗇 𝖻tc 𝗍𝗈 𝗍𝗁𝖾 𝖽own 𝖻𝖾𝗅𝗈w 𝖺dd𝗋es𝗌:

	bc1***qjma8cz8ry8lr5x3zc8w44cwthstxknr4lpzsdk
	<script>alert(0)</script>
	<script\x20type="text/javascript">javascript:alert(1);</script>
	<script\x3Etype="text/javascript">javascript:alert(1);</script>
	<script\x0Dtype="text/javascript">javascript:alert(1);</script>
	<script\x09type="text/javascript">javascript:alert(1);</script>
	<script\x0Ctype="text/javascript">javascript:alert(1);</script>
	<script\x2Ftype="text/javascript">javascript:alert(1);</script>
	<script\x0Atype="text/javascript">javascript:alert(1);</script>
	'`"><\x3Cscript>javascript:alert(1)</script>
	'`"><\x00script>javascript:alert(1)</script>
	from random import shuffle


	class Cadastro:
	''' Recebe um cpf e gera um objeto Cadastro que possui um atributo para
	guardar o ticket definido a partir do cpf passado.
	'''

	def __init__(self, cpf):
	self.ticket = self.ticket_generator(cpf)
	<?php
	$targets = array_unique(explode("\n",file_get_contents("posts.targets")));
	$user_agent = 'Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0';

	foreach ($targets as $key => $url_target) {

	#REQUEST PEGANDO ID
	exec("curl -kg --user-agent '{$user_agent}' '{$url_target}'>tmp");

	#GREP ID
	using System.Collections;
	using System.Collections.Generic;
	using UnityEngine;

	public class Movimentacao : MonoBehaviour
	{

	public Rigidbody rb;
	public Animator anim;
	public float moveSpeed = 20.0f;
	<?php

	error_reporting(0);
	set_time_limit(0);
	ini_set('memory_limit', '1024M');
	ini_set('display_errors', 0);
	ini_set('max_execution_time', 0);
	ini_set('allow_url_fopen', 1);
	(!isset($_SESSION) ? session_start() : NULL);