Skip to content

Instantly share code, notes, and snippets.

@preaction

preaction/gist:d8b09d8e6db7d89e37397336127e6eb7

Created September 14, 2017 01:46
Show Gist options
  • Save preaction/d8b09d8e6db7d89e37397336127e6eb7 to your computer and use it in GitHub Desktop.
Save preaction/d8b09d8e6db7d89e37397336127e6eb7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
# Standard curl user agent string
$ curl http://snowcatman.0fees.us/images/left01.gif
<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx</center>
</body>
</html>
# User agent string from my Safari
$ curl http://snowcatman.0fees.us/images/left01.gif --user-agent "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/603.3.8 (KHTML, like Gecko) Version/10.1.2 Safari/603.3.8"
<html><body><script type="text/javascript" src="/aes.js" ></script><script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f<d.length;f++)e+=(16>d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var a=toNumbers("f655ba9d09a112d4968c63579db590b4"),b=toNumbers("98344c2eee86c3994890592585b49f80"),c=toNumbers("626810b1954e137b16ad198a9a9be195");document.cookie="__test="+toHex(slowAES.decrypt(c,2,a,b))+"; expires=Thu, 31-Dec-37 23:55:55 GMT; path=/"; location.href="http://snowcatman.0fees.us/images/left01.gif?i=1";</script><noscript>This site requires Javascript to work, please enable Javascript in your browser or use a browser with Javascript support</noscript></body></html>%
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment