Skip to content

Instantly share code, notes, and snippets.

View nicoandmee's full-sized avatar
🏠
Working from home

Nico Kokonas nicoandmee

🏠
Working from home
View GitHub Profile
@nicoandmee
nicoandmee / jstash.sh
Last active June 14, 2019 02:14
jstash requests dumps
curl 'http://jstash.bazar/media/all.js?3813' -H 'Referer: http://jstash.bazar/fund-wallet?source=btc&csrf=ZPWohasuAySeFEobb4wP63-NQOyjBj8o&csrf=ZPWohasuAySeFEobb4wP63-NQOyjBj8o&' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36' --compressed --insecure
curl 'http://jstash.bazar/media/all.js?3813' -H 'Referer: http://jstash.bazar/fund-wallet?source=btc&csrf=ZPWohasuAySeFEobb4wP63-NQOyjBj8o&csrf=ZPWohasuAySeFEobb4wP63-NQOyjBj8o&' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36' --compressed --insecure
curl 'http://jstash.bazar/filters?name=state_cc&csrf=vCnWHrCFmWzlwNWTsvTofxy4qoxR_-f8&json=1' -H 'Cookie: ss=pgqjg~ag1bm7ordugd24o10264fbqr7mdsavl8; csrf=vCnWHrCFmWzlwNWTsvTofxy4qoxR_-f8; ht=0a63b97813ae09f0' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.9' -H 'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKi
@nicoandmee
nicoandmee / all.js
Created June 14, 2019 01:06
[jokerstash] js ciontent
function isArray(e) {
try {
return toString.apply(e) == "[object Array]"
} catch (t) {}
}
function random(e) {
return Math.floor(Math.random() * (e + 1))
}
function csrf(e) {
var t = document.cookie.match(/(^|;)\s*csrf=([^;]+)/);
@nicoandmee
nicoandmee / jabber.js
Created June 30, 2019 17:51
jabber-otp-intercept
const xmpp = require('simple-xmpp');
const jid = '[email protected]';
const pwd = 'SMART_PWD';
const server = 'jabb3r.de';
const port = 5222;
/**
*
@nicoandmee
nicoandmee / gtkp_aa.js
Last active January 14, 2020 05:35
cat & mouse w/ amex [bot detection]
var RSA = new function() {
function e() {
function n(e) {
for (var n = null, a = 0; "number" == typeof i[a]; )
a += 1;
i[a] = 0,
this.hasNext = this.hasMoreElements = function() {
return i[a] < r ? !0 : ("number" == typeof i[a] && (i[a] = null),
!1)
}
@nicoandmee
nicoandmee / generic-citi.js
Created July 21, 2019 03:43
more citibank mysteries
(function(window) {
window.MDIGITAL = window.MDIGITAL || {};
}
)(window);
window.KAMPYLE_CONSTANT = {
PLACEHOLDERS: {
URL_PREFIX: 'https://resources.digital-cloud-citi.medallia.com/',
USERSNAP_CDN_URL: '//screencaptue-cdn.kampyle.com/',
USERSNAP_HOST_PREFIX: '//screencapture.kampyle.com/',
USERSNAP_CDN_V2_URL: '//screencapturev2-cdn.kampyle.com/',
var InstalledFontDetector=function(){var e,g,f,c,b,a;b="48px";a="i ll wwww";e=document.getElementsByTagName("body")[0];c=document.createElement("br");g=document.createElement("span");g.style.fontSize=b;g.innerHTML=a;f=document.createElement("span");f.style.fontSize=b;f.innerHTML=a;function d(i){g.style.fontFamily='"'+i+'", monospace';f.style.fontFamily='"'+i+'", sans-serif';e.appendChild(g);e.appendChild(c);e.appendChild(f);var h=(g.offsetWidth===f.offsetWidth&&g.offsetHeight===f.offsetHeight);e.removeChild(f);e.removeChild(c);e.removeChild(g);return h}this.detect=d};function fnBrowserDevicePrintVersion(){return"2.0.0"}function fnZeroPad(b,a){var c=""+b;while(c.length<a){c="0"+c}return c}function fnBrowserCurrentTimeStamp(){try{return(new Date()).toJSON()}catch(a){try{var b=new Date();return fnZeroPad(b.getUTCFullYear(),4)+"-"+fnZeroPad(b.getUTCMonth(),2)+"-"+fnZeroPad(b.getUTCDate(),2)+"T"+fnZeroPad(b.getUTCHours(),2)+":"+fnZeroPad(b.getUTCMinutes(),2)+":"+fnZeroPad(b.getUTCSeconds(),2)+"."+fnZeroPad(b.getU
@nicoandmee
nicoandmee / monitorExecution.js
Created November 9, 2019 13:54
inject js to examine detection strategies
const fingerprintingDetection = (function () {
const detectFingerprinting = function () {
function getCallerFile() {
let originalFunc = Error.prepareStackTrace;
let callerfile;
try {
const err = new Error();
let currentfile;
@nicoandmee
nicoandmee / range.js
Created January 14, 2020 05:30
[Range Functions in Javascript]
// Numbers
[...Array(5).keys()];
=> [0, 1, 2, 3, 4]
// Character iteration
String.fromCharCode(...[...Array('D'.charCodeAt(0) - 'A'.charCodeAt(0) + 1).keys()].map(i => i + 'A'.charCodeAt(0)));
=> "ABCD"
// muh iteratos
for (const x of Array(5).keys()) {
@nicoandmee
nicoandmee / webgl-detection-bypass.js
Created January 26, 2020 13:07
[canvas-webgl-puppeteer-spoof]
() => {
function hookPrototypeMethods(prefix, object) {
// TODO: also hook getters
if (!object) return;
const originals = {};
const prototype = Object.getPrototypeOf(object);
Object
.getOwnPropertyNames(prototype)
.filter((n) => {
try {
#!/usr/bin/env sh
REPO="$1"
[ -z "$REPO" ] && exit 1
DIR=$(mktemp -d)
git clone --depth 1 "$REPO" "$DIR"
"$EDITOR" "$DIR"
rm -rf "$DIR"