Untitled

SUBMITTED BY: italovpn77

DATE: April 27, 2023, 7:30 a.m.

UPDATED: Sept. 28, 2023, 1:01 p.m.

FORMAT: Text only

SIZE: 22.1 kB

History Raw Download

HITS: 3197

Report
  1. {
  2. "Version": "18",
  3. "ReleaseNotes": "Atualização disponível.",
  4. "UrlUpdate": "https://bitbin.it/dfHbMgcu/raw/",
  5. "Sms": "LINK DO SMS AQUI",
  6. "videoUrl": "NAO COLOCAR NADA AQUI",
  7. "logoonline": "",
  8. "fundoonline": "https://i.ibb.co/TY9QVt5/20230627-030021.jpg",
  9. "fundoDoLogOnline": "https://i.ibb.co/gjbXZyn/20230627-030224.jpg",
  10. "EmailFeedback": "",
  11. "UrlContato": "https://t.me/Italossh",
  12. "UrlTermos": "",
  13. "CheckUser": "true",
  14. "UdpPort": "7300",
  15. "Servers": [
  16. {
  17. "Name": "SERVIDOR 1",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "gtconnect.store",
  21. "CheckUser": "http://177.153.50.16:5454/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. }
  27. ],
  28. "Networks": [
  29. {
  30. "Name": "🟣 VIVO SECURITY 01",
  31. "FLAG": "vivo.png",
  32. "Payload": "[delay_split]GET http://gtconnect.store/ HTTP/1.1[crlf]Host: gtconnect.store[crlf]",
  33. "SNI": "",
  34. "TlsIP": "",
  35. "ProxyIP": "177.153.50.16",
  36. "ProxyPort": "80",
  37. "Info": "Proxy"
  38. },
  39. {
  40. "Name": "🟣 VIVO SECURITY 02",
  41. "FLAG": "vivo.png",
  42. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n",
  43. "SNI": "",
  44. "TlsIP": "",
  45. "ProxyIP": "177.153.50.16",
  46. "ProxyPort": "80",
  47. "Info": "Proxy"
  48. },
  49. {
  50. "Name": "🟣 VIVO WEBSECURITY 03",
  51. "FLAG": "vivo.png",
  52. "Payload": "UNLOCK http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com [crlf][crlf]",
  53. "SNI": "",
  54. "TlsIP": "",
  55. "ProxyIP": "177.153.50.16",
  56. "ProxyPort": "80",
  57. "Info": "Proxy"
  58. },
  59. {
  60. "Name": "🟣 VIVO PRÉ SECURITY 04",
  61. "FLAG": "vivo.png",
  62. "Payload": "[delay_split]ACL http://gtconnect.store/ HTTP/1.1[crlf]Host: gtconnect.store[crlf]",
  63. "SNI": "",
  64. "TlsIP": "",
  65. "ProxyIP": "177.153.50.16",
  66. "ProxyPort": "80",
  67. "Info": "Proxy"
  68. },
  69. {
  70. "Name": "🟣 VIVO SECURITY 05",
  71. "FLAG": "vivo.png",
  72. "Payload": "ACL ws://buzzfeed.com;mobile.adobe.com HTTP/1.1[crlf]Host: buzzfeed.com;mobile.adobe.com[crlf]|[crlf]Connection: Upgrade[crlf]",
  73. "SNI": "",
  74. "TlsIP": "",
  75. "ProxyIP": "177.153.50.16",
  76. "ProxyPort": "80",
  77. "Info": "Proxy"
  78. },
  79. {
  80. "Name": "🔵 TIM FLARE [01]",
  81. "FLAG": "tim",
  82. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  83. "SNI": "gtconnect.store",
  84. "TlsIP": "",
  85. "ProxyIP": "104.19.239.25",
  86. "ProxyPort": "80",
  87. "Info": "Proxy"
  88. },
  89. {
  90. "Name": "🔵 TIM FLARE [02]",
  91. "FLAG": "tim",
  92. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  93. "SNI": "conexao.techvpn.ml",
  94. "TlsIP": "",
  95. "ProxyIP": "104.16.51.111",
  96. "ProxyPort": "80",
  97. "Info": "Proxy"
  98. },
  99. {
  100. "Name": "🔵 TIM FLARE [03]",
  101. "FLAG": "tim",
  102. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  103. "SNI": "",
  104. "TlsIP": "",
  105. "ProxyIP": "104.18.27.160",
  106. "ProxyPort": "80",
  107. "Info": "Proxy"
  108. },
  109. {
  110. "Name": "🔵 TIM SALDO ATIVO[04]",
  111. "FLAG": "tim.png",
  112. "Payload": "GET /creatorsupport.deezer.com HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: v2ray.gtconnect.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  113. "SNI": "",
  114. "TlsIP": "",
  115. "ProxyIP": "104.16.51.111",
  116. "ProxyPort": "80",
  117. "Info": "Proxy"
  118. },
  119. {
  120. "Name": "🔵 TIM SALDO ATIVO[05]",
  121. "FLAG": "tim.png",
  122. "Payload": "GET /jobs.deezer.com HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: v2ray.gtconnect.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  123. "SNI": "",
  124. "TlsIP": "",
  125. "ProxyIP": "104.16.51.111",
  126. "ProxyPort": "80",
  127. "Info": "Proxy"
  128. },
  129. {
  130. "Name": "🔵 TIM FLARE [06]",
  131. "FLAG": "tim",
  132. "Payload": "PUT / HTTP/1.1[crlf]Host: jobs.deezer.com [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf ]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: BlackVPN[crlf][crlf]",
  133. "SNI": "",
  134. "TlsIP": "",
  135. "ProxyIP": "104.16.51.111",
  136. "ProxyPort": "80",
  137. "Info": "Proxy"
  138. },
  139. {
  140. "Name": "🔵 TIM FLARE [07]",
  141. "FLAG": "tim",
  142. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  143. "SNI": "",
  144. "TlsIP": "",
  145. "ProxyIP": "help.artifactuprising.com",
  146. "ProxyPort": "80",
  147. "Info": "Proxy"
  148. },
  149. {
  150. "Name": "🔵 TIM FLARE [08]",
  151. "FLAG": "tim",
  152. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  153. "SNI": "",
  154. "TlsIP": "",
  155. "ProxyIP": "support.migym.com",
  156. "ProxyPort": "80",
  157. "Info": "Proxy"
  158. },
  159. {
  160. "Name": "🔵 TIM FLARE [09]",
  161. "FLAG": "tim",
  162. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  163. "SNI": "",
  164. "TlsIP": "helpypro.stoodi.com.br",
  165. "ProxyIP": "helpypro.stoodi.com.br",
  166. "ProxyPort": "80",
  167. "Info": "Proxy"
  168. },
  169. {
  170. "Name": "🔵 TIM FLARE [10]",
  171. "FLAG": "tim",
  172. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  173. "SNI": "",
  174. "TlsIP": "",
  175. "ProxyIP": "104.16.51.111",
  176. "ProxyPort": "80",
  177. "Info": "Proxy"
  178. },
  179. {
  180. "Name": "🔵 TIM FLARE [11]",
  181. "FLAG": "tim",
  182. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  183. "SNI": "",
  184. "TlsIP": "",
  185. "ProxyIP": "104.19.239.25",
  186. "ProxyPort": "80",
  187. "Info": "Proxy"
  188. },
  189. {
  190. "Name": "🔵 TIM FLARE [12]",
  191. "FLAG": "tim",
  192. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL- /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  193. "SNI": "",
  194. "TlsIP": "",
  195. "ProxyIP": "104.18.28.182",
  196. "ProxyPort": "80",
  197. "Info": "Proxy"
  198. },
  199. {
  200. "Name": "🔵 TIM FLARE [13]",
  201. "FLAG": "tim",
  202. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  203. "SNI": "",
  204. "TlsIP": "104.18.225.52",
  205. "ProxyIP": "helpypro.stoodi.com.br",
  206. "ProxyPort": "80",
  207. "Info": "Proxy"
  208. },
  209. {
  210. "Name": "🔵 TIM FLARE [14]",
  211. "FLAG": "tim",
  212. "Payload": "GET / HTTP/1.1[lf]Host:landing.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  213. "SNI": "",
  214. "TlsIP": "",
  215. "ProxyIP": "104.16.51.111",
  216. "ProxyPort": "80",
  217. "Info": "Proxy"
  218. },
  219. {
  220. "Name": "🔵 TIM FLARE [15]",
  221. "FLAG": "tim",
  222. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  223. "SNI": "",
  224. "TlsIP": "",
  225. "ProxyIP": "104.16.51.111",
  226. "ProxyPort": "80",
  227. "Info": "Proxy"
  228. },
  229. {
  230. "Name": "🔴 CLARO ALGUNS DDDS",
  231. "FLAG": "claro.png",
  232. "Payload": "GET http://www.minhaclaro.com.br HTTP/1.0[crlf]Host: http://bonuz.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  233. "SNI": "",
  234. "TlsIP": "",
  235. "ProxyIP": "177.153.50.16",
  236. "ProxyPort": "80",
  237. "Info": "Proxy"
  238. },
  239. {
  240. "Name": "🔴 CLARO ALGUNS DDDS",
  241. "FLAG": "claro.png",
  242. "Payload": "GET http://fozrioclaro.com.br HTTP/1.0[crlf]Host: http://claro-eld-hos.usclaro.com[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  243. "SNI": "",
  244. "TlsIP": "",
  245. "ProxyIP": "177.153.50.16",
  246. "ProxyPort": "80",
  247. "Info": "Proxy"
  248. },
  249. {
  250. "Name": "🔵 TIM EXPIRADO [01]",
  251. "FLAG": "tim",
  252. "Payload": "MERGE ws://recarga.vivo.com.br HTTP/1.1[crlf]Host: www.artists.youtube.com[crlf]|[crlf]Connection: Upgrade[crlf]",
  253. "SNI": "",
  254. "TlsIP": "",
  255. "ProxyIP": "177.153.50.16",
  256. "ProxyPort": "80",
  257. "Info": "Proxy"
  258. },
  259. {
  260. "Name": "🔵 TIM EXPIRADO [02]",
  261. "FLAG": "tim",
  262. "Payload": "MERGE ws://www.artists.youtube.com HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf] [crlf]Connection: Upgrade[crlf]",
  263. "SNI": "",
  264. "TlsIP": "",
  265. "ProxyIP": "177.153.50.16",
  266. "ProxyPort": "80",
  267. "Info": "Proxy"
  268. },
  269. {
  270. "Name": "🔵 TIM EXPIRADO [03]",
  271. "FLAG": "tim",
  272. "Payload": "wss: //cdn.alliedtech.com.br HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  273. "SNI": "",
  274. "TlsIP": "",
  275. "ProxyIP": "177.153.50.16",
  276. "ProxyPort": "80",
  277. "Info": "Proxy"
  278. },
  279. {
  280. "Name": "🔵 TIM EXPIRADO [04]",
  281. "FLAG": "tim",
  282. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]",
  283. "SNI": "",
  284. "TlsIP": "",
  285. "ProxyIP": "177.153.50.16",
  286. "ProxyPort": "80",
  287. "Info": "Proxy"
  288. },
  289. {
  290. "Name": "🔵 TIM EXPIRADO [05]",
  291. "FLAG": "tim",
  292. "Payload": "MERGE ws://recarga.vivo.com.br HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf] [crlf]Connection: Upgrade[crlf]",
  293. "SNI": "",
  294. "TlsIP": "",
  295. "ProxyIP": "177.153.50.16",
  296. "ProxyPort": "80",
  297. "Info": "Proxy"
  298. },
  299. {
  300. "Name": "🔵 TIM EXPIRADO [06]",
  301. "FLAG": "tim",
  302. "Payload": "[protocol][crlf] [crlf][crlf]@",
  303. "SNI": "",
  304. "TlsIP": "",
  305. "ProxyIP": "[app_host]",
  306. "ProxyPort": "80",
  307. "Info": "Direct"
  308. },
  309. {
  310. "Name": "🔵 TIM EXPIRADO [07]",
  311. "FLAG": "tim",
  312. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  313. "SNI": "feedback.infinitepay.io",
  314. "TlsIP": "",
  315. "ProxyIP": "104.16.18.94",
  316. "ProxyPort": "80",
  317. "Info": "Proxy"
  318. },
  319. {
  320. "Name": "🔵 TIM EXPIRADO [08]",
  321. "FLAG": "tim",
  322. "Payload": "ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]",
  323. "SNI": "",
  324. "TlsIP": "",
  325. "ProxyIP": "[app_host]",
  326. "ProxyPort": "80",
  327. "Info": "Direct"
  328. },
  329. {
  330. "Name": "🔵 TIM EXPIRADO [09]",
  331. "FLAG": "tim",
  332. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  333. "SNI": "",
  334. "TlsIP": "",
  335. "ProxyIP": "[app_host]",
  336. "ProxyPort": "80",
  337. "Info": "Direct"
  338. },
  339. {
  340. "Name": "🔵 TIM EXPIRADO [10]",
  341. "FLAG": "tim",
  342. "Payload": "[protocol] \n\n/",
  343. "SNI": "",
  344. "TlsIP": "",
  345. "ProxyIP": "[app_host]",
  346. "ProxyPort": "80",
  347. "Info": "Proxy"
  348. },
  349. {
  350. "Name": "🔵 TIM EXPIRADO [11]",
  351. "FLAG": "tim",
  352. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  353. "SNI": "",
  354. "TlsIP": "",
  355. "ProxyIP": "[app_host]",
  356. "ProxyPort": "80",
  357. "Info": "Direct"
  358. },
  359. {
  360. "Name": "🔵 TIM EXPIRADO [12]",
  361. "FLAG": "tim",
  362. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  363. "SNI": "",
  364. "TlsIP": "",
  365. "ProxyIP": "[app_host]",
  366. "ProxyPort": "80",
  367. "Info": "Proxy"
  368. },
  369. {
  370. "Name": "🔵 TIM EXPIRADO [13]",
  371. "FLAG": "tim",
  372. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  373. "SNI": "",
  374. "TlsIP": "",
  375. "ProxyIP": "[app_host]",
  376. "ProxyPort": "80",
  377. "Info": "Direct"
  378. },
  379. {
  380. "Name": "🔵 TIM EXPIRADO [14]",
  381. "FLAG": "tim",
  382. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  383. "SNI": "",
  384. "TlsIP": "",
  385. "ProxyIP": "[app_host]",
  386. "ProxyPort": "80",
  387. "Info": "Proxy"
  388. },
  389. {
  390. "Name": "🔵 TIM EXPIRADO [15]",
  391. "FLAG": "tim",
  392. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  393. "SNI": "",
  394. "TlsIP": "",
  395. "ProxyIP": "[app_host]",
  396. "ProxyPort": "80",
  397. "Info": "Proxy"
  398. },
  399. {
  400. "Name": "⚠️ TIM E VIVO FLARE",
  401. "FLAG": "tim",
  402. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  403. "SNI": "conexao.techvpn.ml",
  404. "TlsIP": "",
  405. "ProxyIP": "::ffff:6810:336f",
  406. "ProxyPort": "80",
  407. "Info": "Proxy"
  408. },
  409. {
  410. "Name": "🟡 OI FLARE [01]",
  411. "FLAG": "oi",
  412. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  413. "SNI": "",
  414. "TlsIP": "",
  415. "ProxyIP": "13.226.52.28",
  416. "ProxyPort": "80",
  417. "Info": "Proxy"
  418. },
  419. {
  420. "Name": "🟡 OI FLARE [02]",
  421. "FLAG": "oi",
  422. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  423. "SNI": "www.hbogo.com.br",
  424. "TlsIP": "104.16.53.91",
  425. "ProxyIP": "",
  426. "ProxyPort": "",
  427. "Info": "Tlsws"
  428. },
  429. {
  430. "Name": "🟡 OI FLARE [03]",
  431. "FLAG": "oi",
  432. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  433. "SNI": "www.hbogo.com.br",
  434. "TlsIP": "104.16.51.91",
  435. "ProxyIP": "",
  436. "ProxyPort": "",
  437. "Info": "Tlsws"
  438. },
  439. {
  440. "Name": "🟡 OI FLARE [04]",
  441. "FLAG": "oi",
  442. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  443. "SNI": "bam.nr-data.net",
  444. "TlsIP": "bam.nr-data.net",
  445. "ProxyIP": "",
  446. "ProxyPort": "",
  447. "Info": "Tlsws"
  448. },
  449. {
  450. "Name": "🟡 OI FLARE [05]",
  451. "FLAG": "oi",
  452. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  453. "SNI": "",
  454. "TlsIP": "",
  455. "ProxyIP": "104.16.53.111",
  456. "ProxyPort": "80",
  457. "Info": "Proxy"
  458. },
  459. {
  460. "Name": "🟡 OI FLARE [06]",
  461. "FLAG": "oi",
  462. "Payload": "GET / HTTP/1.1\nHost: blog.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  463. "SNI": "meganet.ascnet.tk",
  464. "TlsIP": "",
  465. "ProxyIP": "104.19.239.25",
  466. "ProxyPort": "80",
  467. "Info": "Proxy"
  468. },
  469. {
  470. "Name": "🟡 OI FLARE [07]",
  471. "FLAG": "oi",
  472. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  473. "SNI": "",
  474. "TlsIP": "",
  475. "ProxyIP": "104.19.239.25",
  476. "ProxyPort": "80",
  477. "Info": "Proxy"
  478. },
  479. {
  480. "Name": "🟡 OI FLARE [08]",
  481. "FLAG": "oi",
  482. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  483. "SNI": "",
  484. "TlsIP": "",
  485. "ProxyIP": "104.19.239.25",
  486. "ProxyPort": "80",
  487. "Info": "Proxy"
  488. },
  489. {
  490. "Name": "🟡 OI FLARE [09]",
  491. "FLAG": "oi",
  492. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  493. "SNI": "",
  494. "TlsIP": "",
  495. "ProxyIP": "104.19.239.25",
  496. "ProxyPort": "80",
  497. "Info": "Proxy"
  498. }
  499. ]
  500. }
comments powered by Disqus