Payloads

SUBMITTED BY: henribarbosanf

DATE: May 24, 2023, 1:35 p.m.

UPDATED: Nov. 17, 2023, 12:34 p.m.

FORMAT: Text only

SIZE: 14.4 kB

History Raw Download

HITS: 1218

Report
  1. {
  2. "Name": "🟣VIVO CDN 1🟣"
  3. "FLAG": "vivo"
  4. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI[crlf]Connection: Upgrade[crlf]Upgrade: WebSocket[crlf][crlf]"
  5. "SNI": ""
  6. "TlsIP": ""
  7. "ProxyIP": "recarga.vivo.com.br"
  8. "ProxyPort": "80"
  9. "Info": "Proxy"
  10. }
  11. {
  12. "Name": "🟣VIVO CDN 2🟣"
  13. "FLAG": "vivo"
  14. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI[crlf]Connection: Upgrade[crlf]User-Agent: [ua][crlf]Upgrade: websocket[crlf][crlf]"
  15. "SNI": ""
  16. "TlsIP": "planosvivointernet.com.br"
  17. "ProxyIP": "planosvivointernet.com.br"
  18. "ProxyPort": "80"
  19. "Info": "Proxy"
  20. }
  21. {
  22. "Name": "🟣VIVO CDN 3🟣"
  23. "FLAG": "vivo"
  24. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI [crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]"
  25. "SNI": ""
  26. "TlsIP": ""
  27. "ProxyIP": "52.85.213.82"
  28. "ProxyPort": "80"
  29. "Info": "Proxy"
  30. }
  31. {
  32. "Name": "🟣VIVO CDN 4🟣"
  33. "FLAG": "vivo"
  34. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]"
  35. "SNI": ""
  36. "TlsIP": "108.139.166.122"
  37. "ProxyIP": "108.139.166.21"
  38. "ProxyPort": "80"
  39. "Info": "Proxy"
  40. }
  41. {
  42. "Name": "🟣VIVO CDN 5🟣"
  43. "FLAG": "vivo"
  44. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI[crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf]Keep-Alive:[crlf][crlf]"
  45. "SNI": ""
  46. "TlsIP": "108.158.147.103"
  47. "ProxyIP": "108.158.147.40"
  48. "ProxyPort": "80"
  49. "Info": "Proxy"
  50. }
  51. {
  52. "Name": "🟣VIVO CDN 6🟣"
  53. "FLAG": "vivo"
  54. "Payload": "GET / HTTP/1.1[crlf]Host: FRONT_AQUI [crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf][crlf]"
  55. "SNI": ""
  56. "TlsIP": "108.139.166.109"
  57. "ProxyIP": "108.139.166.70"
  58. "ProxyPort": "80"
  59. "Info": "Proxy"
  60. }
  61. {
  62. "Name": "🟣VIVO 00🟣"
  63. "FLAG": "vivo"
  64. "Payload": "ITECH-NET wss://[app_host] HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]"
  65. "SNI": "[app_host]"
  66. "TlsIP": "104.16.53.111"
  67. "ProxyIP": ""
  68. "ProxyPort": "443"
  69. "Info": "Tlsws"
  70. }
  71. {
  72. "Name": "🟣VIVO 01🟣"
  73. "FLAG": "vivo"
  74. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  75. "SNI": ""
  76. "TlsIP": "104.16.51.111"
  77. "ProxyIP": "104.16.51.111"
  78. "ProxyPort": "80"
  79. "Info": "Proxy"
  80. }
  81. {
  82. "Name": "🟣VIVO 02🟣"
  83. "FLAG": "vivo"
  84. "Payload": "BASELINE-CONTROL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Upgrade[crlf][crlf]"
  85. "SNI": "[app_host]"
  86. "TlsIP": "atendimento.descomplica.com.br"
  87. "ProxyIP": ""
  88. "ProxyPort": "443"
  89. "Info": "Tlsws"
  90. }
  91. {
  92. "Name": "🟣VIVO 03🟣"
  93. "FLAG": "vivo"
  94. "Payload": "GET-MODDER wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]MODDER[crlf][crlf]"
  95. "SNI": "[app_host]"
  96. "TlsIP": "104.16.53.111"
  97. "ProxyIP": "104.16.53.111"
  98. "ProxyPort": "443"
  99. "Info": "Tlsws"
  100. }
  101. {
  102. "Name": "🟣VIVO 04🟣"
  103. "FLAG": "vivo"
  104. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]"
  105. "SNI": "[app_host]"
  106. "TlsIP": "104.16.53.111"
  107. "ProxyIP": ""
  108. "ProxyPort": "443"
  109. "Info": "Tlsws"
  110. }
  111. {
  112. "Name": "🟣VIVO 05🟣"
  113. "FLAG": "vivo"
  114. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  115. "SNI": ""
  116. "TlsIP": ""
  117. "ProxyIP": "104.16.53.111"
  118. "ProxyPort": "80"
  119. "Info": "Proxy"
  120. }
  121. {
  122. "Name": "🟣VIVO 06🟣"
  123. "FLAG": "vivo"
  124. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]"
  125. "SNI": "[app_host]"
  126. "TlsIP": "104.16.53.111"
  127. "ProxyIP": ""
  128. "ProxyPort": "443"
  129. "Info": "Tlsws"
  130. }
  131. {
  132. "Name": "🟣VIVO 07🟣"
  133. "FLAG": "vivo"
  134. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]"
  135. "SNI": "[app_host]"
  136. "TlsIP": "104.16.51.111"
  137. "ProxyIP": ""
  138. "ProxyPort": "443"
  139. "Info": "Tlsws"
  140. }
  141. {
  142. "Name": "🟣VIVO 08🟣"
  143. "FLAG": "vivo"
  144. "Payload": "GET-TOPSPEED wss://[app_host]/ HTTP/1.1[crlf]Host: speedmax.nuveny.xyz[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf]TOPSPEED[crlf][crlf]"
  145. "SNI": "[app_host]"
  146. "TlsIP": "104.16.53.111"
  147. "ProxyIP": ""
  148. "ProxyPort": "443"
  149. "Info": "Tlsws"
  150. }
  151. {
  152. "Name": "🟣VIVO 09🟣"
  153. "FLAG": "vivo"
  154. "Payload": "GET / HTTP/1.1[crlf]Host:app.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host] [crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  155. "SNI": ""
  156. "TlsIP": ""
  157. "ProxyIP": "104.16.53.111"
  158. "ProxyPort": "80"
  159. "Info": "Proxy"
  160. }
  161. {
  162. "Name":"🟣VIVO TURBO NOVA"
  163. "FLAG":"vivo"
  164. "Payload":"GET HTTP://[random=moreira.augustonet.shop] HTTP/1.1[crlf]Host: [rotate=atendimento.lojadointer.com.br;atendimento.magazineluiza.com.br;mycannabisconversation.com.br;compre.vivo.com.br;snow.vivo.com.br;backoffice-equipamentos01.vivo.com.br][crlf]Upgrade: Websocket[crlf][crlf]"
  165. "SNI":"moreira.augustonet.shop"
  166. "TlsIP":""
  167. "ProxyIP":"atendimento.lojadointer.com.br"
  168. "ProxyPort":"80"
  169. "Info":"Proxy"
  170. }
  171. {
  172. "Name":"🟣VIVO SERASA"
  173. "FLAG":"vivo"
  174. "Payload":"GET / HTTP/1.1[crlf]Host: moreira.augustonet.shop[crlf]Origin: https://www.google.com http://www.google.com[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive Upgrade[crlf][crlf]"
  175. "SNI":"ajuda.serasa.com.br"
  176. "TlsIP":"ajuda.serasa.com.br"
  177. "ProxyIP":"ajuda.serasa.com.br"
  178. "ProxyPort":"80"
  179. "Info":"Proxy"
  180. }
  181. {
  182. "Name": "🔵TIM 01 NOVA 🔵"
  183. "FLAG": "tim"
  184. "Payload": "CONNECT / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  185. "SNI": ""
  186. "TlsIP": ""
  187. "ProxyIP": "104.19.242.25"
  188. "ProxyPort": "80"
  189. "Info": "Proxy"
  190. }
  191. {
  192. "Name": "🔵TIM 02 NOVA 🔵"
  193. "FLAG": "tim"
  194. "Payload": "CONNECT / HTTP/1.9[crlf]host: ajuda.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  195. "SNI": ""
  196. "TlsIP": ""
  197. "ProxyIP": "104.19.239.25"
  198. "ProxyPort": "80"
  199. "Info": "Proxy"
  200. }
  201. {
  202. "Name": "🔵TIM 03 NOVA 🔵"
  203. "FLAG": "tim"
  204. "Payload": "CONNECT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.1[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  205. "SNI": ""
  206. "TlsIP": ""
  207. "ProxyIP": "104.16.53.111"
  208. "ProxyPort": "80"
  209. "Info": "Proxy"
  210. }
  211. {
  212. "Name": "🔵TIM 01 🔵"
  213. "FLAG": "tim"
  214. "Payload": "GET / HTTP/1.2\nHost: jobs.deezer.com\nExpect: 100-continue\n\n[split]\n\nPUT- /?/ HTTP/1.2\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n"
  215. "SNI": ""
  216. "TlsIP": "support.jungledisk.com"
  217. "ProxyIP": "support.jungledisk.com"
  218. "ProxyPort": "80"
  219. "Info": "Proxy"
  220. }
  221. {
  222. "Name": "🔵TIM 02 🔵"
  223. "FLAG": "tim"
  224. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  225. "SNI": ""
  226. "TlsIP": "104.16.53.111"
  227. "ProxyIP": "104.16.53.111"
  228. "ProxyPort": "80"
  229. "Info": "Proxy"
  230. }
  231. {
  232. "Name": "🔵TIM 03 🔵"
  233. "FLAG": "tim"
  234. "Payload": "GET / HTTP/1.2\nHost: creatorsupport.deezer.com\nExpect: 100-continue\n\n[split]\n\nPUT- /?/ HTTP/1.2\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n"
  235. "SNI": ""
  236. "TlsIP": "104.16.51.111"
  237. "ProxyIP": "104.16.51.111"
  238. "ProxyPort": "80"
  239. "Info": "Proxy"
  240. }
  241. {
  242. "Name": "🔵TIM 04 🔵"
  243. "FLAG": "tim"
  244. "Payload": "GET / HTTP/1.1[crlf]Host: gitlab.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  245. "SNI": ""
  246. "TlsIP": "104.16.53.111"
  247. "ProxyIP": "104.16.53.111"
  248. "ProxyPort": "80"
  249. "Info": "Proxy"
  250. }
  251. {
  252. "Name": "🔵TIM 05 🔵"
  253. "FLAG": "tim"
  254. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  255. "SNI": ""
  256. "TlsIP": "104.16.51.111"
  257. "ProxyIP": "104.16.51.111"
  258. "ProxyPort": "80"
  259. "Info": "Proxy"
  260. }
  261. {
  262. "Name": "🔵TIM 06 🔵"
  263. "FLAG": "tim"
  264. "Payload": "CONNECT / HTTP/1.9[crlf]host: mobile.hom.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Accept-Encoding: identity[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Location: https://wa.me/84996862124 [crlf]Referer: https://t.me/starlinkoficial [crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: cloudflare[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  265. "SNI": ""
  266. "TlsIP": "104.16.53.111"
  267. "ProxyIP": "104.16.53.111"
  268. "ProxyPort": "80"
  269. "Info": "Proxy"
  270. }
  271. {
  272. "Name": "🔵TIM 07 TESTE 🔵"
  273. "FLAG": "tim"
  274. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  275. "SNI": "104.19.239.25"
  276. "TlsIP": "104.19.239.25"
  277. "ProxyIP": "104.19.239.25"
  278. "ProxyPort": "80"
  279. "Info": "Proxy"
  280. }
  281. {
  282. "Name": "🔵TIM 08 RAPIDA 🔵"
  283. "FLAG": "tim"
  284. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  285. "SNI": "104.19.239.25"
  286. "TlsIP": "104.19.239.25"
  287. "ProxyIP": "104.19.239.25"
  288. "ProxyPort": "80"
  289. "Info": "Proxy"
  290. }
  291. {
  292. "Name": "🔵TIM RAPIDA🔵"
  293. "FLAG": "tim"
  294. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5 max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]"
  295. "SNI": ""
  296. "TlsIP": ""
  297. "ProxyIP": "104.19.239.25"
  298. "ProxyPort": "80"
  299. "Info": "Proxy"
  300. }
  301. {
  302. "Name": "🔵Conexão Tim 00🔵"
  303. "FLAG": "tim"
  304. "Payload": "GET / HTTP/1.1[crlf]Host:cloud.mail.c6bank.com.br[crlf]Expect: 100-palavras[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]"
  305. "SNI": ""
  306. "TlsIP": ""
  307. "ProxyIP": "104.18.29.182"
  308. "ProxyPort": "80"
  309. "Info": "Proxy"
  310. }
  311. {
  312. "Name": "🔵Conexão Tim 01🔵"
  313. "FLAG": "tim"
  314. "Payload": "GET / HTTP/1.1\nHost: cms-assets-p.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [host_port]\nEspere: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n"
  315. "SN": ""
  316. "TlsIP": ""
  317. "TlsIP": ""
  318. "ProxyIP": "104.19.239.25"
  319. "ProxyPort": "80"
  320. "Info": "Proxy"
  321. }
comments powered by Disqus