Att


SUBMITTED BY: skynet666

DATE: Dec. 27, 2022, 11:05 p.m.

UPDATED: April 29, 2024, 6:02 p.m.

FORMAT: Text only

SIZE: 34.5 kB

HITS: 31230

  1. {
  2. "Version": "1.7.22",
  3. "ReleaseNotes": "Mantenha Sempre o aplicativo atualizado.",
  4. "UrlUpdate": "https://bitbin.it/DELOismO/raw/",
  5. "Sms": "011958761917",
  6. "EmailFeedback": "ebertkut@gmail.com",
  7. "UrlContato": "https://chat.whatsapp.com/FACLCBNLO4CHXw7RO8LjwR",
  8. "UrlTermos": "https://chat.whatsapp.com/FACLCBNLO4CHXw7RO8LjwR",
  9. "CheckUser": "true",
  10. "Udp": [
  11. {
  12. "Porta": "7300"
  13. }
  14. ],
  15. "Servers": [
  16. {
  17. "Name": "SKY NET V1",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "sky.divulgartudo.com.br",
  21. "CheckUser": "http://204.216.179.143:5454/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. }
  27. ],
  28. "Networks": [
  29. {
  30. "Name": " 🟣 Escolha Operadora 01/10/23🟣",
  31. "FLAG": "",
  32. "Payload": "",
  33. "SNI": "",
  34. "TlsIP": "",
  35. "ProxyIP": "",
  36. "ProxyPort": "",
  37. "Info": "Direct"
  38. },
  39. {
  40. "Name": "🟣VIVO Jet🟣",
  41. "FLAG": "vivo",
  42. "Payload": "[split][delay_split]ACL / /\n",
  43. "SNI": "204.216.179.143",
  44. "TlsIP": "204.216.179.143",
  45. "ProxyIP": "204.216.179.143",
  46. "ProxyPort": "80",
  47. "Info": "Proxy"
  48. },
  49. {
  50. "Name": "🟣VIVO Speed🟣",
  51. "FLAG": "vivo",
  52. "Payload": "[delay_split] GET / STATUS200",
  53. "SNI": "204.216.179.143",
  54. "TlsIP": "204.216.179.143",
  55. "ProxyIP": "204.216.179.143",
  56. "ProxyPort": "80",
  57. "Info": "Proxy"
  58. },
  59. {
  60. "Name": "🟣VIVO ONLine Velox🟣",
  61. "FLAG": "vivo",
  62. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n",
  63. "SNI": "204.216.179.143",
  64. "TlsIP": "204.216.179.143",
  65. "ProxyIP": "204.216.179.143",
  66. "ProxyPort": "80",
  67. "Info": "Proxy"
  68. },
  69. {
  70. "Name": "🟣VIVO CDN FULL🟣",
  71. "FLAG": "vivo",
  72. "Payload": "GET / HTTP/1.1[crlf]Host: [rotate=d2tsqsybv0h49t.cloudfront.net;d2quj0l4as0dq5.cloudfront.net;d2ud2sm0u4pkbh.cloudfront.net;d26k086sx7v2wt.cloudfront.net;d1c7qkpbf6iw88.cloudfront.net;dcx30oplsu1uq.cloudfront.net;d2wdx4cub0tttv.cloudfront.net;d1tq7o4q8q7jy8.cloudfront.net;d2l8gue6vxmtad.cloudfront.net;][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  73. "SNI": "",
  74. "TlsIP": "",
  75. "ProxyIP": "99.84.31.39",
  76. "ProxyPort": "80",
  77. "Info": "Proxy"
  78. },
  79. {
  80. "Name": "🟣Tim E Vivo Lotter🔵",
  81. "FLAG": "vivo",
  82. "Payload": "MERGE 204.216.179.143 HTTP/1.1[crlf]Host: 204.216.179.143[crlf]Connection: keep-alive[crlf]User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: queimaroscadogrupo.xyz[crlf]X-Online-Host: queimaroscadogrupo.xyz[crlf]X-Forward-Host: queimaroscadogrupo.xyz[crlf]X-Forwarded-For: queimaroscadogrupo.xyz[crlf][crlf]",
  83. "SNI": "204.216.179.143",
  84. "TlsIP": "204.216.179.143",
  85. "ProxyIP": "204.216.179.143",
  86. "ProxyPort": "80",
  87. "Info": "Proxy"
  88. },
  89. {
  90. "Name": "💎TIM E VIVO 01💎",
  91. "FLAG": "vivo",
  92. "Payload": "MERGE 204.216.179.143 HTTP/1.1[crlf]Host: 204.216.179.143[crlf]Connection: keep-alive[crlf]User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: 204.216.179.143[crlf]X-Online-Host: 204.216.179.143[crlf]X-Forward-Host: 204.216.179.143[crlf]X-Forwarded-For: 204.216.179.143[crlf][crlf]",
  93. "SNI": "",
  94. "TlsIP": "",
  95. "ProxyIP": "204.216.179.143",
  96. "ProxyPort": "80",
  97. "Info": "Proxy"
  98. },
  99. {
  100. "Name": "💎TIM E VIVO 02💎",
  101. "FLAG": "tim",
  102. "Payload": "MERGE 204.216.179.143 HTTP/1.1[crlf]Host: 204.216.179.143[crlf]Connection: keep-alive[crlf]User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: 204.216.179.143[crlf]X-Online-Host: 204.216.179.143[crlf]X-Forward-Host: 204.216.179.143[crlf]X-Forwarded-For: 204.216.179.143[crlf][crlf]",
  103. "SNI": "204.216.179.143",
  104. "TlsIP": "204.216.179.143",
  105. "ProxyIP": "204.216.179.143",
  106. "ProxyPort": "80",
  107. "Info": "Proxy"
  108. },
  109. {
  110. "Name": "💎TIM E VIVO 03💎",
  111. "FLAG": "vivo",
  112. "Payload": "MERGE fla.nossaloja.fun HTTP/1.1[crlf]Host: fla.nossaloja.fun[crlf]Connection: keep-alive[crlf]User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; moto g(7) play Build/QPYS30.52-22-14)[crlf]Referer: fla.nossaloja.fun[crlf]X-Online-Host: fla.nossaloja.fun[crlf]X-Forward-Host: fla.nossaloja.fun[crlf]X-Forwarded-For: fla.nossaloja.fun[crlf][crlf]",
  113. "SNI": "fla.nossaloja.fun",
  114. "TlsIP": "fla.nossaloja.fun",
  115. "ProxyIP": "fla.nossaloja.fun",
  116. "ProxyPort": "80",
  117. "Info": "Proxy"
  118. },
  119. {
  120. "Name": "💎TIM E VIVO 04💎",
  121. "FLAG": "tim",
  122. "Payload": "ACL / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  123. "SNI": "",
  124. "TlsIP": "",
  125. "ProxyIP": "0000:0000:0000:0000:0000:ffff:6813:ef19",
  126. "ProxyPort": "80",
  127. "Info": "Proxy"
  128. },
  129. {
  130. "Name": "🔵TIM ● 🚀SUPER RÁPIDA ● APENAS IP INICIADO EM 100.1 🔵",
  131. "FLAG": "tim",
  132. "Payload": "ACL / HTTP/1.9[crlf]host: celular.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  133. "SNI": "mtls.sandbox.c6bank.com.br",
  134. "TlsIP": "204.216.179.143",
  135. "ProxyIP": "104.101.21.59",
  136. "ProxyPort": "80",
  137. "Info": "Proxy"
  138. },
  139. {
  140. "Name": "🔵TIM IP Entre 100.84 ao 100.88 🔵",
  141. "FLAG": "tim",
  142. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  143. "SNI": "",
  144. "TlsIP": "",
  145. "ProxyIP": "172.64.154.143",
  146. "ProxyPort": "80",
  147. "Info": "Proxy"
  148. },
  149. {
  150. "Name": "🔵TIM Sem Fronteiras🔵",
  151. "FLAG": "tim",
  152. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  153. "SNI": "",
  154. "TlsIP": "",
  155. "ProxyIP": "mtls.sandbox.c6bank.com.br",
  156. "ProxyPort": "80",
  157. "Info": "Proxy"
  158. },
  159. {
  160. "Name": "🔵 TIM Expirado sv01🔵",
  161. "FLAG": "tim",
  162. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  163. "SNI": "",
  164. "TlsIP": "",
  165. "ProxyIP": "204.216.179.143",
  166. "ProxyPort": "80",
  167. "Info": "Proxy"
  168. },
  169. {
  170. "Name": "🔵 TIM Expirado sv02🔵",
  171. "FLAG": "tim",
  172. "Payload": "ACL /index.html HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  173. "SNI": "204.216.179.143",
  174. "TlsIP": "204.216.179.143",
  175. "ProxyIP": "204.216.179.143",
  176. "ProxyPort": "80",
  177. "Info": "Proxy"
  178. },
  179. {
  180. "Name": "🔵 TIM Expirado sv03🔵",
  181. "FLAG": "tim",
  182. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  183. "SNI": "204.216.179.143",
  184. "TlsIP": "204.216.179.143",
  185. "ProxyIP": "104.16.239.166",
  186. "ProxyPort": "80",
  187. "Info": "Proxy"
  188. },
  189. {
  190. "Name": "🔵 TIM Expirado sv04🔵",
  191. "FLAG": "tim",
  192. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  193. "SNI": "104.18.33.113",
  194. "TlsIP": "204.216.179.143",
  195. "ProxyIP": "172.64.154.143",
  196. "ProxyPort": "80",
  197. "Info": "Proxy"
  198. },
  199. {
  200. "Name": "🔴ABAIXO OPCOES EM TESTE🔴",
  201. "FLAG": "claro",
  202. "Payload": "",
  203. "SNI": "",
  204. "TlsIP": "",
  205. "ProxyIP": "",
  206. "ProxyPort": "",
  207. "Info": "Direct"
  208. },
  209. {
  210. "Name": "🔵TIM NEW BR1 EXPIRADO 🛰️",
  211. "FLAG": "tim",
  212. "Payload": "ACL mobile.adobe.com HTTP/1.1[crlf]Host: mobile.adobe.com [crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  213. "SNI": "",
  214. "TlsIP": "",
  215. "ProxyIP": "204.216.179.143",
  216. "ProxyPort": "80",
  217. "Info": "Proxy"
  218. },
  219. {
  220. "Name": "🟣VIVO Slow 01🟣",
  221. "FLAG": "vivo",
  222. "Payload": "[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]",
  223. "SNI": "204.216.179.143",
  224. "TlsIP": "204.216.179.143",
  225. "ProxyIP": "204.216.179.143",
  226. "ProxyPort": "80",
  227. "Info": "Proxy"
  228. },
  229. {
  230. "Name": "🔵 TIM Expirado t01🔵",
  231. "FLAG": "tim",
  232. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  233. "SNI": "",
  234. "TlsIP": "",
  235. "ProxyIP": "204.216.179.143",
  236. "ProxyPort": "80",
  237. "Info": "Proxy"
  238. },
  239. {
  240. "Name": "🔵 TIM Expirado t02🔵",
  241. "FLAG": "tim",
  242. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1      (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  243. "SNI": "",
  244. "TlsIP": "",
  245. "ProxyIP": "204.216.179.143",
  246. "ProxyPort": "80",
  247. "Info": "Proxy"
  248. },
  249. {
  250. "Name": "🔵 TIM Expirado t03🔵",
  251. "FLAG": "tim",
  252. "Payload": "ACL http://1.1.1.1rotate= buzzfeed.com ; mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com ; myspace .com ; mobile.google.com ;1.0.0.5[crlf]",
  253. "SNI": "",
  254. "TlsIP": "",
  255. "ProxyIP": "204.216.179.143",
  256. "ProxyPort": "80",
  257. "Info": "Proxy"
  258. },
  259. {
  260. "Name": "🔵 TIM Expirado t04🔵",
  261. "FLAG": "tim",
  262. "Payload": "PROPFIND m.youtube.com.br HTTP/1.1[crlf]Host: m.youtube.com.br[crlf]",
  263. "SNI": "",
  264. "TlsIP": "",
  265. "ProxyIP": "204.216.179.143",
  266. "ProxyPort": "80",
  267. "Info": "Proxy"
  268. },
  269. {
  270. "Name": "🟣VIVO S01🟣",
  271. "FLAG": "vivo",
  272. "Payload": "SEARCH google.com HTTP/1.1[lf]Host: [rotation=amazon.com;buzzfeed.com[lf]",
  273. "SNI": "204.216.179.143",
  274. "TlsIP": "204.216.179.143",
  275. "ProxyIP": "204.216.179.143",
  276. "ProxyPort": "80",
  277. "Info": "Proxy"
  278. },
  279. {
  280. "Name": "🟣VIVO S02🟣",
  281. "FLAG": "vivo",
  282. "Payload": "HTTP/1.0 200 ok[crlf]Host: play.mobilelegends.com[lf]",
  283. "SNI": "204.216.179.143",
  284. "TlsIP": "204.216.179.143",
  285. "ProxyIP": "204.216.179.143",
  286. "ProxyPort": "80",
  287. "Info": "Proxy"
  288. },
  289. {
  290. "Name": "🟣VIVO S03🟣",
  291. "FLAG": "vivo",
  292. "Payload": "SEARCH google.com HTTP/1.1[lf]Host: [rotation=amazon.com;buzzfeed.com[lf]",
  293. "SNI": "204.216.179.143",
  294. "TlsIP": "204.216.179.143",
  295. "ProxyIP": "204.216.179.143",
  296. "ProxyPort": "80",
  297. "Info": "Proxy"
  298. },
  299. {
  300. "Name": "🟣VIVO S04🟣",
  301. "FLAG": "vivo",
  302. "Payload": "CONNECT 127.0.0.1:80[instant_split]GET www.veek.com.br HTTP/1.1[crlf][crlf]",
  303. "SNI": "204.216.179.143",
  304. "TlsIP": "204.216.179.143",
  305. "ProxyIP": "204.216.179.143",
  306. "ProxyPort": "80",
  307. "Info": "Proxy"
  308. },
  309. {
  310. "Name": "🟣VIVO S05🟣",
  311. "FLAG": "vivo",
  312. "Payload": "[delay_split]GET JHCLOUD http:/// HTTP/1.1[crlf][crlf]CONNECT gedoc.vivo.com.br[protocol][crlf][crlf]",
  313. "SNI": "204.216.179.143",
  314. "TlsIP": "204.216.179.143",
  315. "ProxyIP": "204.216.179.143",
  316. "ProxyPort": "80",
  317. "Info": "Proxy"
  318. },
  319. {
  320. "Name": "🟣VIVO S06🟣",
  321. "FLAG": "vivo",
  322. "Payload": "ACL HTTP/1.1 Host: plus.google.com \r\n \r\n",
  323. "SNI": "204.216.179.143",
  324. "TlsIP": "204.216.179.143",
  325. "ProxyIP": "204.216.179.143",
  326. "ProxyPort": "80",
  327. "Info": "Proxy"
  328. },
  329. {
  330. "Name": "🟣VIVO Sub23🟣",
  331. "FLAG": "vivo",
  332. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  333. "SNI": "[app_host]",
  334. "TlsIP": "",
  335. "ProxyIP": "104.16.53.111",
  336. "ProxyPort": "80",
  337. "Info": "Proxy"
  338. },
  339. {
  340. "Name": "🔵TIM Security🔵",
  341. "FLAG": "tim",
  342. "Payload": "[delay_split]ACL / HTTP/1.1[crlf]Host: [rotate=149.78.184.20;52.85.213.82;52.85.213.26;52.85.213.48;13.227.126.49;104.18.7.41;104.16.56.6][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]",
  343. "SNI": "",
  344. "TlsIP": "",
  345. "ProxyIP": "204.216.179.143",
  346. "ProxyPort": "80",
  347. "Info": "Proxy"
  348. },
  349. {
  350. "Name": "🐸1️⃣TIM ● FUNCIONA COM CRÉDITO EXPIRADO OU VÁLIDO ● ‼️SÓ FUNCIONA EM IP ACIMA DE 100.100... PORÉM NÃO PODE PASSAR O IP DE 100.120... POIS NÃO PEGA, TEM QUE ACHAR O IP ENTRE 100.100... E 100.120...",
  351. "FLAG": "tim",
  352. "Payload": "ACL / HTTP/1.3[crlf]Host: mtls.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL- // HTTP/1.3[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  353. "SNI": "",
  354. "TlsIP": "",
  355. "ProxyIP": "172.64.154.143",
  356. "ProxyPort": "80",
  357. "Info": "Proxy"
  358. },
  359. {
  360. "Name": "🐸2️⃣TIM ● FUNCIONA COM CRÉDITO EXPIRADO OU VÁLIDO ● ‼️SÓ FUNCIONA EM IP ACIMA DE 100.100... PORÉM NÃO PODE PASSAR O IP DE 100.120... POIS NÃO PEGA, TEM QUE ACHAR O IP ENTRE 100.100... E 100.120...",
  361. "FLAG": "tim",
  362. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  363. "SNI": "",
  364. "TlsIP": "",
  365. "ProxyIP": "104.16.239.166",
  366. "ProxyPort": "80",
  367. "Info": "Proxy"
  368. },
  369. {
  370. "Name": "🐸3️⃣TIM ● FUNCIONA COM CRÉDITO EXPIRADO OU VÁLIDO ● ‼️SÓ FUNCIONA EM IP ACIMA DE 100.100... PORÉM NÃO PODE PASSAR O IP DE 100.120... POIS NÃO PEGA, TEM QUE ACHAR O IP ENTRE 100.100... E 100.120...",
  371. "FLAG": "tim",
  372. "Payload": "ACL /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf][app_host] / HTTP/1.1[lf]Host: FLARE[lf]Upgrade: websocket[lf][lf]",
  373. "SNI": "",
  374. "TlsIP": "",
  375. "ProxyIP": "172.64.154.143",
  376. "ProxyPort": "80",
  377. "Info": "Proxy"
  378. },
  379. {
  380. "Name": "Vivo WebSecurity ON ✅ 1",
  381. "FLAG": "vivo",
  382. "Payload": "OPTIONS http://8.8.8.8rotate=web.google.com;8.0.0.4 HTTP/1.1[crlf]Host: http://8.8.8.8rotate=web.espn.com;8.8.4.4[crlf]",
  383. "SNI": "",
  384. "TlsIP": "",
  385. "ProxyIP": "204.216.179.143",
  386. "ProxyPort": "80",
  387. "Info": "Proxy"
  388. },
  389. {
  390. "Name": "Vivo WebSecurity ON ✅ 2",
  391. "FLAG": "vivo",
  392. "Payload": "ACL HTTP/2\r\nHost: mobile.playstation.net.gov.br/cap/[protocol][lf]TCP\\n \\n",
  393. "SNI": "",
  394. "TlsIP": "",
  395. "ProxyIP": "204.216.179.143",
  396. "ProxyPort": "80",
  397. "Info": "Proxy"
  398. },
  399. {
  400. "Name": "Vivo WebSecurity ON ✅ 3",
  401. "FLAG": "vivo",
  402. "Payload": "PROPPATCH http://www.bradesco.com.br HTTP/2[crlf]Host: http://www.bradesco.com.br[crlf]",
  403. "SNI": "",
  404. "TlsIP": "",
  405. "ProxyIP": "204.216.179.143",
  406. "ProxyPort": "80",
  407. "Info": "Proxy"
  408. },
  409. {
  410. "Name": "Vivo WebSecurity ON ✅ 4",
  411. "FLAG": "vivo",
  412. "Payload": "DELETE /2[lf]/CONNECT /1 HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[lf]Host: vivo.com.br[lf][lf]",
  413. "SNI": "",
  414. "TlsIP": "",
  415. "ProxyIP": "204.216.179.143",
  416. "ProxyPort": "80",
  417. "Info": "Proxy"
  418. },
  419. {
  420. "Name": "Vivo Websocket Security [01]🇧🇷·",
  421. "FLAG": "vivo",
  422. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  423. "SNI": "",
  424. "TlsIP": "",
  425. "ProxyIP": "204.216.179.143",
  426. "ProxyPort": "80",
  427. "Info": "Proxy"
  428. },
  429. {
  430. "Name": "Vivo Websocket Security [02]🇧🇷·",
  431. "FLAG": "vivo",
  432. "Payload": "[delay_split]GET [app_host] / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  433. "SNI": "",
  434. "TlsIP": "",
  435. "ProxyIP": "204.216.179.143",
  436. "ProxyPort": "80",
  437. "Info": "Proxy"
  438. },
  439. {
  440. "Name": "Vivo Websocket Security [03]🇧🇷·",
  441. "FLAG": "vivo",
  442. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]",
  443. "SNI": "",
  444. "TlsIP": "",
  445. "ProxyIP": "204.216.179.143",
  446. "ProxyPort": "80",
  447. "Info": "Proxy"
  448. },
  449. {
  450. "Name": "Vivo Websocket Security [04]🇧🇷·",
  451. "FLAG": "vivo",
  452. "Payload": "[delay_split]GET [app_host] / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  453. "SNI": "",
  454. "TlsIP": "",
  455. "ProxyIP": "204.216.179.143",
  456. "ProxyPort": "80",
  457. "Info": "Proxy"
  458. },
  459. {
  460. "Name": "Vivo Websocket Security [05]🇧🇷·",
  461. "FLAG": "vivo",
  462. "Payload": "[delay_split]GET [app_host] / HTTP/1.1[crlf]Host: gedoc.vivo.com.br[crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]",
  463. "SNI": "",
  464. "TlsIP": "",
  465. "ProxyIP": "204.216.179.143",
  466. "ProxyPort": "80",
  467. "Info": "Proxy"
  468. },
  469. {
  470. "Name": "Vivo para dds acima de 91+🇧🇷·",
  471. "FLAG": "vivo",
  472. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]X-Online-Host: [host][crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]",
  473. "SNI": "",
  474. "TlsIP": "",
  475. "ProxyIP": "204.216.179.143",
  476. "ProxyPort": "80",
  477. "Info": "Proxy"
  478. },
  479. {
  480. "Name": "Tim Saldo Expirado [05]🇧🇷·",
  481. "FLAG": "tim",
  482. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  483. "SNI": "",
  484. "TlsIP": "",
  485. "ProxyIP": "204.216.179.143",
  486. "ProxyPort": "80",
  487. "Info": "Proxy"
  488. },
  489. {
  490. "Name": "Tim Saldo Expirado [06]🇧🇷·",
  491. "FLAG": "tim",
  492. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+ http://www.google.com/bot.html)[crlf]Referenciador : http://www.google.com [crlf]",
  493. "SNI": "",
  494. "TlsIP": "",
  495. "ProxyIP": "204.216.179.143",
  496. "ProxyPort": "80",
  497. "Info": "Proxy"
  498. },
  499. {
  500. "Name": "Tim Saldo Expirado [07]🇧🇷·",
  501. "FLAG": "tim",
  502. "Payload": "ACL http://1.1.1.1rotate= buzzfeed.com ; mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com ; myspace .com ; mobile.google.com ;1.0.0.5[crlf]",
  503. "SNI": "",
  504. "TlsIP": "",
  505. "ProxyIP": "204.216.179.143",
  506. "ProxyPort": "80",
  507. "Info": "Proxy"
  508. },
  509. {
  510. "Name": "Tim Saldo Expirado [08]🇧🇷·",
  511. "FLAG": "tim",
  512. "Payload": "PROPPATCH http://mercadolivre.com.br HTTP/2[crlf]Host: http://mercadolivre.com.br[crlf]",
  513. "SNI": "",
  514. "TlsIP": "",
  515. "ProxyIP": "204.216.179.143",
  516. "ProxyPort": "80",
  517. "Info": "Proxy"
  518. },
  519. {
  520. "Name": "Tim Saldo Expirado [09]🇧🇷·",
  521. "FLAG": "tim",
  522. "Payload": "ACL http://1.1.1.1rotate= buzzfeed.com;mobile.adobe.com ;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate= buzzfeed.com; myspace.com;mobile.google.com ;1.0.0.5[crlf]",
  523. "SNI": "",
  524. "TlsIP": "",
  525. "ProxyIP": "204.216.179.143",
  526. "ProxyPort": "80",
  527. "Info": "Proxy"
  528. },
  529. {
  530. "Name": "Tim Saldo Expirado [10]🇧🇷·",
  531. "FLAG": "tim",
  532. "Payload": "ACL HTTP/1.1[crlf]Host: community-dashbird.buzzfeed.com[crlf]X-Online-Host: [app_host][crlf]Connection:l llbj Keep-Alive[crlf]User-Agent: [ua][crlf]",
  533. "SNI": "",
  534. "TlsIP": "",
  535. "ProxyIP": "204.216.179.143",
  536. "ProxyPort": "80",
  537. "Info": "Proxy"
  538. },
  539. {
  540. "Name": "Tim Saldo Válido [01]🇧🇷·",
  541. "FLAG": "tim",
  542. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  543. "SNI": "",
  544. "TlsIP": "",
  545. "ProxyIP": "104.19.239.25",
  546. "ProxyPort": "80",
  547. "Info": "Proxy"
  548. },
  549. {
  550. "Name": "Tim Saldo Válido [02]🇧🇷·",
  551. "FLAG": "tim",
  552. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  553. "SNI": "",
  554. "TlsIP": "",
  555. "ProxyIP": "104.16.51.111",
  556. "ProxyPort": "80",
  557. "Info": "Proxy"
  558. },
  559. {
  560. "Name": "Tim Saldo Válido [03]🇧🇷·",
  561. "FLAG": "tim",
  562. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  563. "SNI": "",
  564. "TlsIP": "",
  565. "ProxyIP": "104.18.27.160",
  566. "ProxyPort": "80",
  567. "Info": "Proxy"
  568. },
  569. {
  570. "Name": "Tim Saldo Válido [04]🇧🇷·",
  571. "FLAG": "tim",
  572. "Payload": "GET / HTTP/1.1nHost: c6bank.com.brnExpect: 100-continuenn[split]nnACL /?/ HTTP/1.1nHost: [app_host]/nExpect: 100-continuenUpgrade: websocketnUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)nn",
  573. "SNI": "",
  574. "TlsIP": "",
  575. "ProxyIP": "104.19.240.25",
  576. "ProxyPort": "80",
  577. "Info": "Proxy"
  578. },
  579. {
  580. "Name": "Tim Saldo Válido [05]🇧🇷·",
  581. "FLAG": "tim",
  582. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: [app_host][crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  583. "SNI": "",
  584. "TlsIP": "31.192.232.86",
  585. "ProxyIP": "31.192.232.86",
  586. "ProxyPort": "80",
  587. "Info": "Proxy"
  588. },
  589. {
  590. "Name": "Tim Websocket Security [01]🇧🇷·",
  591. "FLAG": "tim",
  592. "Payload": "GET / HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  593. "SNI": "",
  594. "TlsIP": "",
  595. "ProxyIP": "204.216.179.143",
  596. "ProxyPort": "80",
  597. "Info": "Proxy"
  598. },
  599. {
  600. "Name": "Tim Websocket Security [02]🇧🇷·",
  601. "FLAG": "tim",
  602. "Payload": "ACL HTTP/1.1 Host: plus.google.com rnn rnn",
  603. "SNI": "",
  604. "TlsIP": "204.216.179.143",
  605. "ProxyIP": "204.216.179.143",
  606. "ProxyPort": "80",
  607. "Info": "Proxy"
  608. },
  609. {
  610. "Name": "Tim Websocket Security [03]🇧🇷·",
  611. "FLAG": "tim",
  612. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.brnnn n",
  613. "SNI": "",
  614. "TlsIP": "204.216.179.143",
  615. "ProxyIP": "204.216.179.143",
  616. "ProxyPort": "80",
  617. "Info": "Proxy"
  618. },
  619. {
  620. "Name": "Tim Saldo Expirado [01]🇧🇷·",
  621. "FLAG": "tim",
  622. "Payload": "ACL http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]",
  623. "SNI": "204.216.179.143",
  624. "TlsIP": "204.216.179.143",
  625. "ProxyIP": "204.216.179.143",
  626. "ProxyPort": "80",
  627. "Info": "Proxy"
  628. },
  629. {
  630. "Name": "Tim Saldo Expirado [02]🇧🇷·",
  631. "FLAG": "tim",
  632. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  633. "SNI": "204.216.179.143",
  634. "TlsIP": "204.216.179.143",
  635. "ProxyIP": "204.216.179.143",
  636. "ProxyPort": "80",
  637. "Info": "Proxy"
  638. },
  639. {
  640. "Name": "Tim Saldo Expirado [03]🇧🇷·",
  641. "FLAG": "tim",
  642. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  643. "SNI": "204.216.179.143",
  644. "TlsIP": "204.216.179.143",
  645. "ProxyIP": "204.216.179.143",
  646. "ProxyPort": "80",
  647. "Info": "Proxy"
  648. },
  649. {
  650. "Name": "Tim Saldo Expirado [04]🇧🇷·",
  651. "FLAG": "tim",
  652. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  653. "SNI": "204.216.179.143",
  654. "TlsIP": "204.216.179.143",
  655. "ProxyIP": "204.216.179.143",
  656. "ProxyPort": "80",
  657. "Info": "Proxy"
  658. },
  659. {
  660. "Name": "Tim Websocket Security [04]🇧🇷·",
  661. "FLAG": "tim",
  662. "Payload": "CONNECT / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  663. "SNI": "",
  664. "TlsIP": "204.216.179.143",
  665. "ProxyIP": "204.216.179.143",
  666. "ProxyPort": "80",
  667. "Info": "Proxy"
  668. },
  669. {
  670. "Name": "Tim Saldo Válido [06]🇧🇷·",
  671. "FLAG": "tim",
  672. "Payload": "CONNECT / HTTP/1.9[crlf]host:[random=1pass-poc.hom.c6bank.com.br;cms-assets-p.c6bank.com.br;cdn.c6bank.com.br; blog.c6bank.com.br;www.c6bank.com.br;ajuda.c6bank.com.br;cloud.mail.c6bank.com.br;image.mail.c6bank.com.br;ajuda.c6bank.com.br;auth.of.c6bank.com.br;click.mail.c6bank.com.br;cloud;mail.c6bank.com.br;image.mail.c6bank.com.br;mail.c6bank.com.br;view.mail.c6bank.com.br;web.of.c6bank.com.br;www.c6bank.com.br;app1.c6bank.app;app2.c6bank.app;apptest.c6bank.app;apptest1.c6bank.app;apptest2.c6bank.app;mobile.c6bank.app;mobile.hom.c6bank.app;saas.c6bank.app;saas-d.c6bank.app;saas-h.c6bank.app;apptest.c6bank.app;app.c6bank.app;apphom.c6bank.app;app1.c6bank.app;saas-h.c6bank.app;app2.c6bank.app;saas.c6bank.app;mobile.c6bank.app;saas-d.c6bank.app;apptest2.c6bank.app;apptest1.c6bank.app][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  673. "SNI": "",
  674. "TlsIP": "104.101.21.59",
  675. "ProxyIP": "104.101.21.59",
  676. "ProxyPort": "443",
  677. "Info": "Proxy"
  678. },
  679. {
  680. "Name": "Tim Saldo Válido [07]🇧🇷·",
  681. "FLAG": "tim",
  682. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  683. "SNI": "",
  684. "TlsIP": "104.18.28.182",
  685. "ProxyIP": "104.18.28.182",
  686. "ProxyPort": "80",
  687. "Info": "Proxy"
  688. },
  689. {
  690. "Name": "🔵✅TIM Default ✅🔵",
  691. "FLAG": "tim",
  692. "Payload": "ACL /cdn-cgi/trace HTTP/1.1[lf]Host: mtls.sandbox.c6bank.com.br[lf][lf][split][lf][lf]SKYNET / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: websocket[lf][lf]",
  693. "SNI": "172.64.154.143",
  694. "TlsIP": "104.18.33.113",
  695. "ProxyIP": "104.17.64.225",
  696. "ProxyPort": "80",
  697. "Info": "Proxy"
  698. },
  699. {
  700. "Name": "🔵✅TIM SECURITY ✅🔵",
  701. "FLAG": "tim",
  702. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  703. "SNI": "",
  704. "TlsIP": "",
  705. "ProxyIP": "104.16.51.111",
  706. "ProxyPort": "80",
  707. "Info": "Proxy"
  708. },
  709. {
  710. "Name": "🔵✅TIM Security 2✅🔵",
  711. "FLAG": "tim",
  712. "Payload": "ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  713. "SNI": "",
  714. "TlsIP": "",
  715. "ProxyIP": "104.16.51.111#172.64.154.143#104.18.33.113",
  716. "ProxyPort": "80",
  717. "Info": "Proxy"
  718. },
  719. {
  720. "Name": "🔵 TIM p1🔵",
  721. "FLAG": "tim",
  722. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: 204.216.179.143[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]",
  723. "SNI": "",
  724. "TlsIP": "",
  725. "ProxyIP": "104.16.239.166",
  726. "ProxyPort": "80",
  727. "Info": "Proxy"
  728. },
  729. {
  730. "Name": "🔵 TIM p2🔵",
  731. "FLAG": "tim",
  732. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: fla.nossaloja.fun[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]",
  733. "SNI": "",
  734. "TlsIP": "",
  735. "ProxyIP": "104.16.239.166",
  736. "ProxyPort": "80",
  737. "Info": "Proxy"
  738. },
  739. {
  740. "Name": "🔵 TIM p3🔵",
  741. "FLAG": "tim",
  742. "Payload": "ACL / HTTP/1.1[crlf]Host: [rotate=cdnjs.cloudflare.com;aceitedigital.vivo.com.br;api.vivo.com.br;gateway.ipfs.cloudflare.com][crlf][delay_split]ACL / HTTP/1.1[crlf]Host: topspeed.c6bank.app[crlf][crlf][delay_split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]@canaldotl[crlf][crlf]",
  743. "SNI": "",
  744. "TlsIP": "",
  745. "ProxyIP": "104.16.239.166",
  746. "ProxyPort": "80",
  747. "Info": "Proxy"
  748. }
  749. ]
  750. }

comments powered by Disqus