Çağrı sh4dowb

## verify_crx_contents.py
import json
import base64
import hashlib
import zipfile
import sys

BRANCH_FACTOR = 128
BLOCK_SIZE = 4096
DIGEST_SIZE = 32

## solana_subscribe.py
from websockets.sync.client import connect
import json

addresses = [] # base58 address/account/pubkey list
with connect('wss://solana-rpc.publicnode.com') as ws:
    i = 0
    for address in addresses:
        i += 1
        msg = json.dumps({"jsonrpc": "2.0", "id": i, "method": "logsSubscribe", "params": [{"mentions": [address]}, {"commitment": "finalized"}]})
        # subscribes to solana transactions. token transfers will mention the associated token addresses instead of owner address, so it's not picked up by this filter

## phpkoru-deobfuscate-3.php
<?php
// put encrypted code in encrypted.php, or use it like:
// $ php phpkoru-deobfuscate-3.php encryptedfilename.php
// UPDATED v1.0.7 , if you are getting error "IV passed is only 15 bytes long", try this

// for decrypting advanced (.dll/.so) version contact me on telegram

function trydecrypt($fn, $b64='fge_ebg13‎‎‎‎', $rot13='bcraffy_qrpelcg‎'){
    eval('$'.$b64.'="base64_decode";');
    eval('$'.$rot13.'="str_rot13";');

## unmarshal-ruby-date.py
from datetime import date, timedelta
from rubymarshal.classes import UsrMarshal
from rubymarshal.reader import loads
data = b'\x04\x08U:\tDate[\x0bi\x00i\x03\xe5R%i\x00i\x00i\x00f\x0c2299161'
# 1984-12-18
data = loads(data)
if isinstance(data, UsrMarshal):
  # data._private_data[1]  is days since Julian Day (November 24, 4714 BC)
  data = (date(1900, 1, 1) + timedelta(days=data._private_data[1] - 2415021)).strftime('%Y-%m-%d')

## phpkoru-deobfuscate-2.php
<?php
// V1.0.7 DEOBFUSCATOR: https://gist.github.com/sh4dowb/68c9e090a3006b1d19ce49a22529c0a5

// put encrypted code in encrypted.php, or use it like:
// $ php phpkoru-deobfuscate-2.php encryptedfilename.php

// for decrypting advanced version contact me on telegram

function decrypt($fn, $try=0){
    $onfr64_qrpbqr = 'base64_decode';

## ethereum-rpc-proxy.py
import http.server
import requests
import json

class Proxy(http.server.BaseHTTPRequestHandler):
    def do_POST(self):
        data = self.rfile.read(int(self.headers['Content-Length'])).decode('utf-8')
        decodedData = json.loads(data)
        newheaders = {}
        for k, v in self.headers.items():

## catch_all.txt
# redirect MX record to your server ip

apt install postfix
adduser myuser # necessary - you cannot login as root on dovecot imap
# add user

nano /etc/postfix/virtual
# @example.com myuser
# info@example.com  info # optional

## stake_limbo_verify.py
import hmac
import hashlib

def getLimboOutcome(server, client, nonce):
        server = server.encode()
        client = client.encode()
        nonce = str(nonce).encode()
        round = 0
        hash = hmac.new(server, client+b':'+nonce+b':'+str(round).encode('utf-8'), hashlib.sha256).digest()
        first4 = hash[:4]

## decrypt.py
# I absolutely hated crypto-js for this. non-standard configurations, weird algorithms, ...
# well obviously you can encrypt it with a better configuration which people will not
# go crazy figuring out its implementation, but in this case I wasn't encrypting the data.

import base64
from Crypto.Hash import MD5
from Crypto.Util.Padding import unpad
from Crypto.Cipher import AES

# generated using: CryptoJS.AES.encrypt('test 123456 plaintext', 'some password').toString()

## send_usdt.py
import time
from tronapi import Tron

full_node = 'https://api.trongrid.io'
solidity_node = 'https://api.trongrid.io'
event_server = 'https://api.trongrid.io'

pkey = "private_key_hex"

payments = [
	import json
	import base64
	import hashlib
	import zipfile
	import sys

	BRANCH_FACTOR = 128
	BLOCK_SIZE = 4096
	DIGEST_SIZE = 32
	from websockets.sync.client import connect
	import json

	addresses = [] # base58 address/account/pubkey list
	with connect('wss://solana-rpc.publicnode.com') as ws:
	i = 0
	for address in addresses:
	i += 1
	msg = json.dumps({"jsonrpc": "2.0", "id": i, "method": "logsSubscribe", "params": [{"mentions": [address]}, {"commitment": "finalized"}]})
	# subscribes to solana transactions. token transfers will mention the associated token addresses instead of owner address, so it's not picked up by this filter
	<?php
	// put encrypted code in encrypted.php, or use it like:
	// $ php phpkoru-deobfuscate-3.php encryptedfilename.php
	// UPDATED v1.0.7 , if you are getting error "IV passed is only 15 bytes long", try this

	// for decrypting advanced (.dll/.so) version contact me on telegram

	function trydecrypt($fn, $b64='fge_ebg13‎‎‎‎', $rot13='bcraffy_qrpelcg‎'){
	eval('$'.$b64.'="base64_decode";');
	eval('$'.$rot13.'="str_rot13";');
	from datetime import date, timedelta
	from rubymarshal.classes import UsrMarshal
	from rubymarshal.reader import loads
	data = b'\x04\x08U:\tDate[\x0bi\x00i\x03\xe5R%i\x00i\x00i\x00f\x0c2299161'
	# 1984-12-18
	data = loads(data)
	if isinstance(data, UsrMarshal):
	# data._private_data[1] is days since Julian Day (November 24, 4714 BC)
	data = (date(1900, 1, 1) + timedelta(days=data._private_data[1] - 2415021)).strftime('%Y-%m-%d')
	<?php
	// V1.0.7 DEOBFUSCATOR: https://gist.github.com/sh4dowb/68c9e090a3006b1d19ce49a22529c0a5

	// put encrypted code in encrypted.php, or use it like:
	// $ php phpkoru-deobfuscate-2.php encryptedfilename.php

	// for decrypting advanced version contact me on telegram

	function decrypt($fn, $try=0){
	$onfr64_qrpbqr = 'base64_decode';
	import http.server
	import requests
	import json

	class Proxy(http.server.BaseHTTPRequestHandler):
	def do_POST(self):
	data = self.rfile.read(int(self.headers['Content-Length'])).decode('utf-8')
	decodedData = json.loads(data)
	newheaders = {}
	for k, v in self.headers.items():
	# redirect MX record to your server ip

	apt install postfix
	adduser myuser # necessary - you cannot login as root on dovecot imap
	# add user

	nano /etc/postfix/virtual
	# @example.com myuser
	# info@example.com info # optional
	import hmac
	import hashlib

	def getLimboOutcome(server, client, nonce):
	server = server.encode()
	client = client.encode()
	nonce = str(nonce).encode()
	round = 0
	hash = hmac.new(server, client+b':'+nonce+b':'+str(round).encode('utf-8'), hashlib.sha256).digest()
	first4 = hash[:4]
	# I absolutely hated crypto-js for this. non-standard configurations, weird algorithms, ...
	# well obviously you can encrypt it with a better configuration which people will not
	# go crazy figuring out its implementation, but in this case I wasn't encrypting the data.

	import base64
	from Crypto.Hash import MD5
	from Crypto.Util.Padding import unpad
	from Crypto.Cipher import AES

	# generated using: CryptoJS.AES.encrypt('test 123456 plaintext', 'some password').toString()
	import time
	from tronapi import Tron

	full_node = 'https://api.trongrid.io'
	solidity_node = 'https://api.trongrid.io'
	event_server = 'https://api.trongrid.io'

	pkey = "private_key_hex"

	payments = [