Skip to content

Instantly share code, notes, and snippets.

@ziot

ziot/server.js Secret

Created December 19, 2023 19:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ziot/3bf579aa1d27b5cf07de4e7a4a859c45 to your computer and use it in GitHub Desktop.
Save ziot/3bf579aa1d27b5cf07de4e7a4a859c45 to your computer and use it in GitHub Desktop.
Signed Request Service
var http = require('http');
var sha1 = require('js-sha1');
var url = require('url');
// Globals
var test;
var data;
var userId = "379578839";
var userAgent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0";
function getSignedData(endpoint, newUserId="", newUserAgent="") {
// Set user id and/or agent globally
if(newUserAgent) { userAgent = newUserAgent; }
if(newUserId) { userId = newUserId; }
// Base object
data = {"transitional":{"silentJSONParsing":true,"forcedJSONParsing":true,"clarifyTimeoutError":false},"timeout":"0","xsrfCookieName":"XSRF-TOKEN","xsrfHeaderName":"X-XSRF-TOKEN","maxContentLength":"-1","maxBodyLength":"-1","env":{},"headers":{"accept":"application/json, text/plain, */*","time":"","sign":"","app-token":"","user-id":userId,"x-bc":"1e463206dc31cfa38a46e15c1c07bcb943f7ed1b"},"baseURL":"","params":{},"withCredentials":true,"maxRedirects":"0","method":"get","url":endpoint,"axios-retry":{"retryCount":"0","lastRequestTime":""}};
// Get signed data
var out = test(data);
return out;
}
function e(W, n) {
const t = f();
return e = function(n, c) {
let r = t[n -= 396];
if (void 0 === e.qPexBE) {
var d = function(W) {
const n = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';
let t = '',
c = '';
for (
let r = 0,
d,
o,
u = 0; o = W.charAt(u++);
~o &&
(d = r % 4 ? 64 * d + o : o, r++ % 4) ? t += String.fromCharCode(255 & d >> (-2 * r & 6)) : 0
) o = n.indexOf(o);
for (let r = 0, d = t.length; r < d; r++) c += '%' + ('00' + t.charCodeAt(r).toString(16)).slice(-2);
return decodeURIComponent(c)
};
const n = function(W, n) {
let t = [],
c = 0,
r,
o = '',
u;
for (W = d(W), u = 0; u < 256; u++) t[u] = u;
for (u = 0; u < 256; u++) c = (c + t[u] + n.charCodeAt(u % n.length)) % 256,
r = t[u],
t[u] = t[c],
t[c] = r;
u = 0,
c = 0;
for (let d = 0; d < W.length; d++) u = (u + 1) % 256,
c = (c + t[u]) % 256,
r = t[u],
t[u] = t[c],
t[c] = r,
o += String.fromCharCode(W.charCodeAt(d) ^ t[(t[u] + t[c]) % 256]);
return o
};
e.Qatful = n,
W = arguments,
e.qPexBE = !0
}
const o = undefined,
u = n + t[0],
f = W[u];
return f ? r = f : (void 0 === e.EcOzEm && (e.EcOzEm = !0), r = e.Qatful(r, c), W[u] = r),
r
},
e(W, n)
}
function f() {
const W = [
'kCkwWQFdMvW',
'ASopWQtcQCoEW4K',
'W7tcMdRcMbG',
'DL3dTZZdIaVcOCo2W7VdRG',
'txddOCojW7ldOG',
'WPldJmoJsW',
'avhdU0vAWPudBJ/cOG',
'emk5qJ0V',
'WOD1lmoMwhNcJ8oT',
'W4ZdMmo5',
'omkEdJfx',
'WPtdLh7cQ8kSh3TZDmoAW5DZWOG',
'W5OSWR8/D1ZcItZdGmor',
'xSolWRddKG',
'zHi7WRC',
'W5DAE8o0W4K',
'WRi7W54Qe14zW5DoCCoDfSkt',
'W5PDy8osW44',
'WPG6imkXW7XxW7ddOG',
'W4jQEmoHW6Sg',
'W6ataehdQepdJmkJWPlcLCkbsbC',
'W6ZdO8oOWQyH',
'WObeWRJcUgK',
'gwtdK8k9xSoUgtKSW4e',
'WRy0W6vQEW',
'W47cMxpcMY/cOa',
'gc1gWQrh',
'WPm5W5lcMmk+',
'WO1FW6XXCXK',
'l8oIWQhcNu7cVCoXhZZcPG',
'aIjWWQjMF3xcS8oRWP0',
'WOKjW5zJEW',
'W53dQCk9lh4',
'W6DkWOn+DW',
'eftcKxFdVa',
'jNxdG31H',
'zCkYwftcRG',
'CmkiA2lcQWWNbSk2rq',
'WP9/eCo1xNG',
'W69PWOv9vai',
'WOLQu3RcM8oM',
'i8kwWQddRxlcGq',
'WPFdLSoOyIO',
'W4rtCJu',
'W6nXeCk/W7y',
'd1VcQNdcMq',
'cKBdVNZdKsi',
'WRSYW4vauq',
'W7RcLx/cPJ4',
'ag7dSGKz',
'fMNdNmkOACoP',
'W6vPWOjjEG',
'xLpdHYJdUG',
'W6ZcQ8oyWRtdVSk9W7FcGSoUrCk2txi',
'jSouztNcR3VcSSoKWPu4',
'wZZdHCoeyb7dMa',
'WOTjemoOCW',
'W5BcRMJcQaO',
'WPaFW4RcOmkW',
'WPpdHh3dQXpdG21NlrO',
'WRhdTSkdW6hcUSoN',
'EvddUcNdVWW',
'oCk2FsaT',
'fmotFKGYWP0YbvuwoLyx',
'ErhcOu5bgCo7nsP0swH6',
'W41ND8o0W5WbW7dcS8o5Cq',
'WO5ZW7nqWQu',
'WPFdKwXDW78',
'CLddOJRdRHBcTSk9W5VdRZL9WOjyEGaqaCkApSkgmmkt',
'ag3cIduRW4m',
'WRa4W58Sgfn0W7fwrSopdW',
'k8kyWOldON8',
'WOzNxg/cRmoHx2Dika',
'W4pcMcRcQYldUw9GgWq',
'ymomWQJdVuS',
'm1pdQw3dNa',
'kCkbWPNdG2e',
'W47cPaddSmoC',
'W7XwWQrstG',
'WPzkW6LNWPm',
'y34Rc8kx',
'iCo6Bc/cUW',
'dLZdTfbTWPi',
'W57dG8kxfwy',
'WPtdGxJdR1xdG3TdlJWX',
'xSovW4myW5a',
'W7XkWOTWzmkjm8kUjvm',
'hu3dLmkEFa',
'W6PqWOy',
's8kfoHrKW4L2m2X5lMClW7RcL8k/W5KOoG',
'W4auW7pdPWWPbmobW57dUqRcRmkN',
'W5bTWQ59za',
'sCkbiHP3W4a',
'D8kMyNtcVW',
'W6JdGCkFm1y',
'W4pcHaxcIqG',
'hG/cOLJdKW',
'lmkBWQ/dUexcHH3cK8oVyW',
'W5NdGmk6d1X1imkQkmo1',
'vXtcPsVcLN5jzmo6wWrQvW',
'buVdSwNdPIuzB8optq',
'WPfafSoOwW',
'WQzivwRcVW',
'xt3dNMaUW48pWPJdRIq',
'cZ/cOu3dSCki',
'd2dcHYaCW4qtWPtdPbi',
'WRFdV8koW4ZcNW',
'W57dGmohWQ01',
'W6BdR3X4W4lcMcK',
'WRntW4zytG',
'jK9QW6VdSCkYW7zIWRrL',
'W6rkWRBdN8kz',
'oSkCvXK1',
'Feacomkn',
'W6NcOSoEWRddUSoAWR7cJ8odz8ka',
'lKddVs4Q',
'dMVcGL3cIa',
'WOe0W7vzqqTNWPnoga',
'W4hdN8oKWOuYWRC',
'W5xcNr/cLGO',
'uq3cRGeHW4m+qXlcG8oeWQi',
'WPldNxLqW50',
'r3ddPSo9W5W',
'h0NcHK3cQCoJb0zira',
'nJ9EWPDw',
'ds9/WRDrEa',
'W4NcHsxdV8oPtG',
'WRPXW7DCWRm',
'yvZdUYS',
'WRBdHwDUW4m',
'WRHMrZdcUG',
'W41uEINdRL7cGSo5WQ0b',
'WQfkW7LuWQKTW57cTsRdTa',
'WPLPW61SxG',
'W7P9WQrpvW',
'WRLGc8okwW',
'qN3dRSoCW4xdPs05FN4',
'WP7dNCkpW4/cGW',
'g0JdLwjU',
'W6hcRbldKSoL',
'k03dTq8Zt8kPjXTz',
'bNtdJwFdTmons1ddRLRdTCkynmkOW4C8vsBcLxNcKSoqW4NdVCk2WR/dLsqoW4rZW5O',
'WR7dU8kmW7tcJCoGWQRcRmo2xW',
'pSkaWQJdHNu',
'WQHUW5zrWOC',
'WP7dSmoazaK',
'u8k8oaXz',
'B8k2lJvX',
'bhtdIKpdVW',
'trtdKWJdNW',
'gLtcLKpdKSoi',
'fuxcTNtdJW',
'W6PkWPddJmkm'
];
return (f = function() {
return W
})()
}! function(W, n) {
function t(W, n) {
return e(W - 169, n)
}
const c = W();
for (;;) try {
const W = undefined;
if (
parseInt(t(572, 'Zs3s')) / 1 * (parseInt(t(660, 'D@bz')) / 2) + -parseInt(t(689, '2aWH')) / 3 + -parseInt(t(616, '*ijj')) / 4 + parseInt(t(695, 'OdNu')) / 5 + -parseInt(t(664, '2aWH')) / 6 * (parseInt(t(708, ')[@n')) / 7) + parseInt(t(621, 'WFXf')) / 8 + -parseInt(t(658, 'kqHd')) / 9 === n
) break;
c.push(c.shift())
} catch (r) {
c.push(c.shift())
}
}(f, 195242);
function test(W) {
const n = {
dFhdW: function(W, n) {
return W + n
},
dkLhy: function(W, n) {
return W + n
},
RiDNI: function(W, n) {
return W + n
},
szMOs: function(W, n) {
return W + n
},
CNbIM: function(W, n) {
return W + n
},
yqOUw: function(W, n) {
return W + n
},
yUmrV: function(W, n) {
return W + n
},
umTOk: function(W, n) {
return W + n
},
JztXq: function(W, n) {
return W + n
},
kDKhA: function(W, n) {
return W + n
},
JRbHr: function(W, n) {
return W + n
},
qgyjT: function(W, n) {
return W + n
},
lTQvL: function(W, n) {
return W + n
},
gAfQa: function(W, n) {
return W + n
},
tRuTQ: function(W, n) {
return W + n
},
KfQfq: function(W, n) {
return W + n
},
ygWtb: function(W, n) {
return W + n
},
vXtqZ: function(W, n) {
return W - n
},
xUNJP: function(W, n) {
return W + n
},
feiSZ: function(W, n) {
return W % n
},
HKfti: function(W, n) {
return W - n
},
gMTPw: function(W, n) {
return W - n
},
XibZe: function(W, n) {
return W % n
},
iMrCb: function(W, n) {
return W - n
},
xSozY: function(W, n) {
return W % n
},
AYbDg: function(W, n) {
return W - n
},
rJebb: function(W, n) {
return W + n
},
ThqAy: function(W, n) {
return W % n
},
qsfLs: function(W, n) {
return W % n
},
DLYJx: function(W, n) {
return W - n
},
WuOGs: function(W, n) {
return W - n
},
Upyvy: function(W, n) {
return W % n
},
vRRDF: function(W, n) {
return W % n
},
NNYLc: function(W, n) {
return W + n
},
ctNPi: function(W, n) {
return W % n
},
bWZXZ: function(W, n) {
return W % n
},
CGhwP: function(W, n) {
return W + n
},
YnQkS: function(W, n) {
return W - n
},
FBwDo: function(W, n) {
return W % n
},
kUBHy: function(W, n) {
return W % n
},
vLcrx: t(1512, 'V4W9'),
bZizq: function(W, n, t, c) {
return W(n, t, c)
},
SaEgD: t(1513, 'FalW'),
LQkvO: t(1492, '3ZI0'),
jLNwm: function(W, n) {
return W(n)
},
frWIg: t(1412, '78ai'),
jlcJQ: t(1442, 'xh3j')
};
function t(W, n) {
return e(W - 988, n)
}
const c = W["url"];
// const d = window.navigator.userAgent;
const d = userAgent;
f["time"] = +new Date;
const i = W["headers"]["user-id"];
const k = sha1(
[
n["frWIg"], // pE5CRmAhC8fvaWy6u58tKDTEKCZyTKLA
f["time"], // time
c, // url
i || // user-id
0
]["join"]('\n')
);
function manipulate(W) {
function c(W, n) {
return t(n - -1835, W)
}
return Math[c("rBmE", -402)](n[c("6sEI", -330)](n[c("Q%$b", -299)](n[c("QK%[", -340)](n[c("0zqo", -318)](n[c("WFXf", -378)](n[c("clI$", -328)](n[c("yhUL", -384)](n[c("jUL2", -302)](n[c("rBmE", -304)](n[c("kqHd", -427)](n[c("WFXf", -430)](n[c("gH$l", -366)](n[c("YAY#", -315)](n[c("2aWH", -445)](n[c("0R8!", -429)](n[c("*ijj", -334)](n[c("xh3j", -396)](n[c("FalW", -417)](n[c("OdNu", -389)](n[c("9q@T", -344)](n[c("0zqo", -318)](n[c("S%ly", -326)](n[c("jWS7", -324)](n[c("^pkg", -354)](n[c("3ZI0", -359)](n[c("Pdk8", -385)](n[c("FalW", -418)](W[17948 % W[c("kqHd", -351)]][c("CLYd", -339)](0), 81) + (W[17243 % W[c("WFXf", -372)]][c("jWS7", -388)](0) + 145) + n[c("hI8L", -419)](W[n[c("p&Sk", -449)](16349, W[c("^pkg", -386)])][c("3ZI0", -408)](0), 97), n[c("p&Sk", -362)](W[n[c("PP1Q", -442)](15540, W[c("YAY#", -307)])][c("kqHd", -422)](0), 85)), W[16941 % W[c("Pdk8", -439)]][c("sm^e", -382)](0) - 134), n[c("B3y]", -412)](W[n[c("78ai", -377)](16128, W[c("CLYd", -371)])][c("xh3j", -346)](0), 75)), n[c("SLcX", -451)](W[16053 % W[c("9%F8", -410)]][c("CLYd", -339)](0), 88)), W[n[c("WFXf", -360)](15691, W[c("3ZI0", -350)])][c("XTBX", -433)](0) - 86), W[n[c("^pkg", -363)](18017, W[c("PP1Q", -407)])][c("XTBX", -433)](0) - 70), n[c("B3y]", -300)](W[17468 % W[c("78ai", -414)]][c("Pdk8", -381)](0), 95)), W[n[c("jUL2", -431)](17125, W[c("3ZI0", -350)])][c("clI$", -313)](0) - 102) + n[c("rBmE", -390)](W[16649 % W[c("WFXf", -372)]][c("KLr0", -311)](0), 62), n[c("gH$l", -448)](W[n[c("QK%[", -411)](15775, W[c("jUL2", -383)])][c("2aWH", -338)](0), 115)), W[n[c("2aWH", -409)](16540, W[c(")[@n", -342)])][c("p&Sk", -424)](0) + 144), n[c("clI$", -317)](W[n[c("QK%[", -421)](16596, W[c("QK%[", -370)])][c("QK%[", -314)](0), 76)), n[c("*ijj", -425)](W[17746 % W[c("rBmE", -446)]][c("PP1Q", -428)](0), 127)), W[n[c("cnTt", -387)](15896, W[c("*ijj", -438)])][c("kqHd", -422)](0) - 145), n[c("SLcX", -331)](W[n[c("hI8L", -369)](17895, W[c("xh3j", -392)])][c("kqHd", -422)](0), 74)), n[c("Pdk8", -440)](W[n[c("KLr0", -336)](16197, W[c("Zs3s", -329)])][c("Zs3s", -405)](0), 74)), n[c("fO&^", -434)](W[n[c("0zqo", -375)](16766, W[c("FalW", -319)])][c("6sEI", -357)](0), 147)), n[c("*ijj", -334)](W[n[c("QUqN", -437)](16281, W[c(")[@n", -342)])][c("QK%[", -314)](0), 109)), n[c("Zs3s", -426)](W[n[c("0R8!", -355)](15616, W[c("0R8!", -373)])][c("clI$", -313)](0), 76)) + n[c("Q%$b", -404)](W[15986 % W[c("0R8!", -373)]][c("CLYd", -339)](0), 108) + (W[n[c("78ai", -413)](18129, W[c("78ai", -414)])][c(")[@n", -306)](0) + 129), n[c("xh3j", -394)](W[n[c("KLr0", -416)](17401, W[c("jWS7", -361)])][c("V4W9", -325)](0), 81)), n[c("clI$", -379)](W[n[c("2aWH", -316)](17572, W[c("xh3j", -392)])][c("clI$", -313)](0), 108)), n[c("CLYd", -309)](W[n[c("V4W9", -333)](17345, W[c("Zs3s", -329)])][c("KLr0", -311)](0), 103)), W[n[c("QUqN", -332)](16820, W[c("kqHd", -351)])][c("0zqo", -374)](0) + 74), n[c("Q%$b", -349)](W[n[c("XGnI", -401)](17828, W[c("rBmE", -446)])][c("QUqN", -432)](0), 86)), n[c("cnTt", -364)](W[n[c("9q@T", -443)](17028, W[c("kqHd", -351)])][c("PP1Q", -428)](0), 91)), n[c("Zs3s", -376)](W[n[c("gg$^", -337)](17637, W[c("jUL2", -383)])][c("gH$l", -441)](0), 70)), n[c("yhUL", -353)](W[n[c("cnTt", -380)](16424, W[c("KLr0", -365)])][c("cnTt", -447)](0), 83)))[c("0R8!", -403)](16)
}
return { "time": f["time"], "sign": [t(1420, "gH$l"), k, manipulate(k), n[t(1530, "kqHd")]]["join"](":") }
}
http.createServer(function (req, res) {
var q = url.parse(req.url, true).query;
var endpoint = q.endpoint;
var id = q.id;
var ua = q.ua;
/*
data = getSignedData(
"/api2/v2/users/list?cl[]=82517634&cl[]=379831713",
"379578839",
"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0"
)
*/
data = getSignedData(
endpoint,
id,
ua
)
console.log(data)
res.write(JSON.stringify(data));
res.end();
}).listen(8080);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment