Untitled


SUBMITTED BY: italovpn77

DATE: April 27, 2023, 7:30 a.m.

UPDATED: Sept. 28, 2023, 1:01 p.m.

FORMAT: Text only

SIZE: 23.1 kB

HITS: 3197

  1. {
  2. "Version": "7",
  3. "ReleaseNotes": "Atualização disponível.",
  4. "UrlUpdate": "https://bitbin.it/dfHbMgcu/raw/",
  5. "Sms": "LINK DO SMS AQUI",
  6. "videoUrl": "NAO COLOCAR NADA AQUI",
  7. "logoonline": "https://i.ibb.co/q9T79gr/20230627-035341.png",
  8. "fundoonline": "https://i.ibb.co/SmxpTq0/20230627-030948.jpg",
  9. "fundoDoLogOnline": "https://i.ibb.co/SmxpTq0/20230627-030948.jpg",
  10. "EmailFeedback": "",
  11. "UrlContato": "https://t.me/Italossh",
  12. "UrlTermos": "",
  13. "CheckUser": "true",
  14. "UdpPort": "7300",
  15. "Servers": [
  16. {
  17. "Name": "SERVIDOR 1",
  18. "TYPE": "premium",
  19. "FLAG": "br.png",
  20. "ServerIP": "gtconnect.store",
  21. "CheckUser": "http://177.153.50.16:8181/checkUser",
  22. "ServerPort": "22",
  23. "SSLPort": "443",
  24. "USER": "",
  25. "PASS": ""
  26. }
  27. ],
  28. "Networks": [
  29. {
  30. "Name": "🟣 VIVO SECURITY 01",
  31. "FLAG": "vivo.png",
  32. "Payload": "[delay_split]GET http://www.vivo.com.br/ HTTP/1.1[crlf]Host: www.vivo.com.br[crlf]Upgrade: websocket[crlf]-CONNECT [host_port] [protocol][crlf][crlf]",
  33. "SNI": "",
  34. "TlsIP": "",
  35. "ProxyIP": "177.153.50.16",
  36. "ProxyPort": "8080",
  37. "Info": "Proxy"
  38. },
  39. {
  40. "Name": "🟣 VIVO SECURITY 02",
  41. "FLAG": "vivo.png",
  42. "Payload": "[delay_split][lf]GET / HTTP/1.1[lf]Host: portal.vivo.com.br\\n\\n\\n \\n",
  43. "SNI": "",
  44. "TlsIP": "",
  45. "ProxyIP": "177.153.50.16",
  46. "ProxyPort": "80",
  47. "Info": "Proxy"
  48. },
  49. {
  50. "Name": "🟣 VIVO WEBSECURITY 03",
  51. "FLAG": "vivo.png",
  52. "Payload": "[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]Upgrade: websocket[crlf]-CONNECT [host_port] [protocol][crlf][crlf]",
  53. "SNI": "",
  54. "TlsIP": "",
  55. "ProxyIP": "177.153.50.16",
  56. "ProxyPort": "8080",
  57. "Info": "Proxy"
  58. },
  59. {
  60. "Name": "🟣 VIVO PRÉ SECURITY 04",
  61. "FLAG": "vivo.png",
  62. "Payload": "[split]GET http://ffsuporte.garena.com HTTP/1.1[crlf]Host: [rotate=recarga.vivo.com.br;ffsuporte.garena.com[crlf]|[crlf]Connection: Upgrade[crlf]",
  63. "SNI": "",
  64. "TlsIP": "",
  65. "ProxyIP": "177.153.50.16",
  66. "ProxyPort": "80",
  67. "Info": "Proxy"
  68. },
  69. {
  70. "Name": "🟣 VIVO SECURITY 05",
  71. "FLAG": "vivo.png",
  72. "Payload": "[split]GET http://www.vivo.com.br/ HTTP/1.1[crlf]Host: www.vivo.com.br[crlf]Upgrade: websocket[crlf]-CONNECT [host_port] [protocol][crlf][crlf]",
  73. "SNI": "",
  74. "TlsIP": "",
  75. "ProxyIP": "177.153.50.16",
  76. "ProxyPort": "8080",
  77. "Info": "Proxy"
  78. },
  79. {
  80. "Name": "🟣 VIVO SECURITY 06",
  81. "FLAG": "vivo.png",
  82. "Payload": "[delay_split][lf]GET http://1.1.1.1rotate=buzzfeed.com;mobile.adobe.com;1.0.0.5 HTTP/1.1[crlf]Host: http://1.1.1.1rotate=buzzfeed.com;myspace.com;mobile.google.com;1.0.0.5[crlf]Upgrade: websocket[crlf]-CONNECT [host_port] [protocol][crlf][crlf]#
  83. [delay_split][lf]CONNECT / HTTP/1.1[lf]Host: vivomeunegocio.com.br[lf]\n",
  84. "SNI": "",
  85. "TlsIP": "",
  86. "ProxyIP": "177.153.50.16",
  87. "ProxyPort": "80",
  88. "Info": "Proxy"
  89. },
  90. {
  91. "Name": "🔵 TIM FLARE [01]",
  92. "FLAG": "tim.png",
  93. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  94. "SNI": "gtconnect.store",
  95. "TlsIP": "",
  96. "ProxyIP": "104.19.239.25",
  97. "ProxyPort": "80",
  98. "Info": "Proxy"
  99. },
  100. {
  101. "Name": "🔵 TIM FLARE [02]",
  102. "FLAG": "tim.png",
  103. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  104. "SNI": "conexao.techvpn.ml",
  105. "TlsIP": "",
  106. "ProxyIP": "104.16.51.111",
  107. "ProxyPort": "80",
  108. "Info": "Proxy"
  109. },
  110. {
  111. "Name": "🔵 TIM FLARE [03]",
  112. "FLAG": "tim.png",
  113. "Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: gtconnect.store[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
  114. "SNI": "",
  115. "TlsIP": "",
  116. "ProxyIP": "104.18.27.160",
  117. "ProxyPort": "80",
  118. "Info": "Proxy"
  119. },
  120. {
  121. "Name": "🔵 TIM SALDO ATIVO[04]",
  122. "FLAG": "tim.png",
  123. "Payload": "GET /creatorsupport.deezer.com HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: v2ray.gtconnect.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  124. "SNI": "",
  125. "TlsIP": "",
  126. "ProxyIP": "104.16.51.111",
  127. "ProxyPort": "80",
  128. "Info": "Proxy"
  129. },
  130. {
  131. "Name": "🔵 TIM SALDO ATIVO[05]",
  132. "FLAG": "tim.png",
  133. "Payload": "GET /jobs.deezer.com HTTP/1.1[crlf]Host: jobs.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: v2ray.gtconnect.store[crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  134. "SNI": "",
  135. "TlsIP": "",
  136. "ProxyIP": "104.16.51.111",
  137. "ProxyPort": "80",
  138. "Info": "Proxy"
  139. },
  140. {
  141. "Name": "🔵 TIM FLARE [06]",
  142. "FLAG": "tim.png",
  143. "Payload": "PUT / HTTP/1.1[crlf]Host: jobs.deezer.com [crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf ]Host: [app_host][crlf]Upgrade: Websocket[crlf]Referer: BlackVPN[crlf][crlf]",
  144. "SNI": "",
  145. "TlsIP": "",
  146. "ProxyIP": "104.16.51.111",
  147. "ProxyPort": "80",
  148. "Info": "Proxy"
  149. },
  150. {
  151. "Name": "🔵 TIM FLARE [07]",
  152. "FLAG": "tim.png",
  153. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  154. "SNI": "",
  155. "TlsIP": "",
  156. "ProxyIP": "help.artifactuprising.com",
  157. "ProxyPort": "80",
  158. "Info": "Proxy"
  159. },
  160. {
  161. "Name": "🔵 TIM FLARE [08]",
  162. "FLAG": "tim.png",
  163. "Payload": "GET / HTTP/1.1[crlf]Host: creatorsupport.deezer.com[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  164. "SNI": "",
  165. "TlsIP": "",
  166. "ProxyIP": "support.migym.com",
  167. "ProxyPort": "80",
  168. "Info": "Proxy"
  169. },
  170. {
  171. "Name": "🔵 TIM FLARE [09]",
  172. "FLAG": "tim.png",
  173. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- // HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  174. "SNI": "",
  175. "TlsIP": "helpypro.stoodi.com.br",
  176. "ProxyIP": "helpypro.stoodi.com.br",
  177. "ProxyPort": "80",
  178. "Info": "Proxy"
  179. },
  180. {
  181. "Name": "🔵 TIM FLARE [10]",
  182. "FLAG": "tim.png",
  183. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  184. "SNI": "",
  185. "TlsIP": "",
  186. "ProxyIP": "104.16.51.111",
  187. "ProxyPort": "80",
  188. "Info": "Proxy"
  189. },
  190. {
  191. "Name": "🔵 TIM FLARE [11]",
  192. "FLAG": "tim.png",
  193. "Payload": "GET / HTTP/1.1[crlf]Host: api.sandbox.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host: [app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  194. "SNI": "",
  195. "TlsIP": "",
  196. "ProxyIP": "104.19.239.25",
  197. "ProxyPort": "80",
  198. "Info": "Proxy"
  199. },
  200. {
  201. "Name": "🔵 TIM FLARE [12]",
  202. "FLAG": "tim.png",
  203. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL- /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  204. "SNI": "",
  205. "TlsIP": "",
  206. "ProxyIP": "104.18.28.182",
  207. "ProxyPort": "80",
  208. "Info": "Proxy"
  209. },
  210. {
  211. "Name": "🔵 TIM FLARE [13]",
  212. "FLAG": "tim.png",
  213. "Payload": "GET / HTTP/1.1[crlf]Host: helpypro.stoodi.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]PUT- /?/ HTTP/1.1[crlf]Host:[app_host][crlf]Expect: 100-continue[crlf]Upgrade: websocket[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf][crlf]",
  214. "SNI": "",
  215. "TlsIP": "104.18.225.52",
  216. "ProxyIP": "helpypro.stoodi.com.br",
  217. "ProxyPort": "80",
  218. "Info": "Proxy"
  219. },
  220. {
  221. "Name": "🔵 TIM FLARE [14]",
  222. "FLAG": "tim.png",
  223. "Payload": "GET / HTTP/1.1[lf]Host:landing.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  224. "SNI": "",
  225. "TlsIP": "",
  226. "ProxyIP": "104.16.51.111",
  227. "ProxyPort": "80",
  228. "Info": "Proxy"
  229. },
  230. {
  231. "Name": "🔵 TIM FLARE [15]",
  232. "FLAG": "tim.png",
  233. "Payload": "GET / HTTP/1.1[lf]Host: helpypro.stoodi.com.br[lf]:[lf][split][lf]GET- / HTTP/1.1[lf]Host: [app_host][lf]Upgrade: ws[lf]User-Agent: yes[lf][lf]",
  234. "SNI": "",
  235. "TlsIP": "",
  236. "ProxyIP": "104.16.51.111",
  237. "ProxyPort": "80",
  238. "Info": "Proxy"
  239. },
  240. {
  241. "Name": "🔴 CLARO ALGUNS DDDS",
  242. "FLAG": "claro.png",
  243. "Payload": "GET http://www.minhaclaro.com.br HTTP/1.0[crlf]Host: http://bonuz.claro.com.br[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  244. "SNI": "",
  245. "TlsIP": "",
  246. "ProxyIP": "177.153.50.16",
  247. "ProxyPort": "80",
  248. "Info": "Proxy"
  249. },
  250. {
  251. "Name": "🔴 CLARO ALGUNS DDDS",
  252. "FLAG": "claro.png",
  253. "Payload": "GET http://fozrioclaro.com.br HTTP/1.0[crlf]Host: http://claro-eld-hos.usclaro.com[crlf]Connection: keep-alive[crlf]User-Agent: Upgrade [crlf][crlf]",
  254. "SNI": "",
  255. "TlsIP": "",
  256. "ProxyIP": "177.153.50.16",
  257. "ProxyPort": "80",
  258. "Info": "Proxy"
  259. },
  260. {
  261. "Name": "🔵 TIM EXPIRADO [01]",
  262. "FLAG": "tim.png",
  263. "Payload": "MERGE ws://recarga.vivo.com.br HTTP/1.1[crlf]Host: www.artists.youtube.com[crlf]|[crlf]Connection: Upgrade[crlf]",
  264. "SNI": "",
  265. "TlsIP": "",
  266. "ProxyIP": "177.153.50.16",
  267. "ProxyPort": "80",
  268. "Info": "Proxy"
  269. },
  270. {
  271. "Name": "🔵 TIM EXPIRADO [02]",
  272. "FLAG": "tim.png",
  273. "Payload": "PROPPATCH ws://global-4-lvs-colossus-10.opera-mini.net HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf] [crlf]Connection: Upgrade[crlf]",
  274. "SNI": "",
  275. "TlsIP": "",
  276. "ProxyIP": "177.153.50.16",
  277. "ProxyPort": "80",
  278. "Info": "Proxy"
  279. },
  280. {
  281. "Name": "🔵 TIM EXPIRADO [03]",
  282. "FLAG": "tim.png",
  283. "Payload": "PROPPATCH wss: //global-4-lvs-colossus-10.opera-mini.net HTTP/1.1[crlf]Host: www.artists.youtube.com[crlf] [crlf]Connection: Upgrade[crlf]",
  284. "SNI": "",
  285. "TlsIP": "",
  286. "ProxyIP": "177.153.50.16",
  287. "ProxyPort": "80",
  288. "Info": "Proxy"
  289. },
  290. {
  291. "Name": "🔵 TIM EXPIRADO [04]",
  292. "FLAG": "tim.png",
  293. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net [crlf]",
  294. "SNI": "",
  295. "TlsIP": "",
  296. "ProxyIP": "177.153.50.16",
  297. "ProxyPort": "80",
  298. "Info": "Proxy"
  299. },
  300. {
  301. "Name": "🔵 TIM EXPIRADO [05]",
  302. "FLAG": "tim.png",
  303. "Payload": "MERGE ws://recarga.vivo.com.br HTTP/1.1[crlf]Host: recarga.vivo.com.br[crlf] [crlf]Connection: Upgrade[crlf]",
  304. "SNI": "",
  305. "TlsIP": "",
  306. "ProxyIP": "177.153.50.16",
  307. "ProxyPort": "80",
  308. "Info": "Proxy"
  309. },
  310. {
  311. "Name": "🔵 TIM EXPIRADO [06]",
  312. "FLAG": "tim.png",
  313. "Payload": "[protocol][crlf] [crlf][crlf]@",
  314. "SNI": "",
  315. "TlsIP": "",
  316. "ProxyIP": "[app_host]",
  317. "ProxyPort": "80",
  318. "Info": "Direct"
  319. },
  320. {
  321. "Name": "🔵 TIM EXPIRADO [07]",
  322. "FLAG": "tim.png",
  323. "Payload": "GET wss://feedback.infinitepay.io HTTP/1.1[crlf]Host: [app_host] [crlf]Upgrade: websocket[crlf][crlf]",
  324. "SNI": "",
  325. "TlsIP": "",
  326. "ProxyIP": "104.16.18.94",
  327. "ProxyPort": "80",
  328. "Info": "Proxy"
  329. },
  330. {
  331. "Name": "🔵 TIM EXPIRADO [08]",
  332. "FLAG": "tim.png",
  333. "Payload": "ACL buzzfeed.com HTTP/1.1[lf]Host:buzzfeed.com[lf]",
  334. "SNI": "",
  335. "TlsIP": "",
  336. "ProxyIP": "[app_host]",
  337. "ProxyPort": "80",
  338. "Info": "Direct"
  339. },
  340. {
  341. "Name": "🔵 TIM EXPIRADO [09]",
  342. "FLAG": "tim.png",
  343. "Payload": "HTTP/1.1[crlf] [crlf][crlf]•",
  344. "SNI": "",
  345. "TlsIP": "",
  346. "ProxyIP": "[app_host]",
  347. "ProxyPort": "80",
  348. "Info": "Direct"
  349. },
  350. {
  351. "Name": "🔵 TIM EXPIRADO [10]",
  352. "FLAG": "tim.png",
  353. "Payload": "[protocol] \n\n/",
  354. "SNI": "",
  355. "TlsIP": "",
  356. "ProxyIP": "[app_host]",
  357. "ProxyPort": "80",
  358. "Info": "Proxy"
  359. },
  360. {
  361. "Name": "🔵 TIM EXPIRADO [11]",
  362. "FLAG": "tim.png",
  363. "Payload": "HTTP/ [crlf][crlf]|[crlf]",
  364. "SNI": "",
  365. "TlsIP": "",
  366. "ProxyIP": "[app_host]",
  367. "ProxyPort": "80",
  368. "Info": "Direct"
  369. },
  370. {
  371. "Name": "🔵 TIM EXPIRADO [12]",
  372. "FLAG": "tim.png",
  373. "Payload": "PROPPATCH global-4-lvs-colossus-10.opera-mini.net HTTP/1.0[crlf]Host: global-4-lvs-colossus-10.opera-mini.net[crlf]",
  374. "SNI": "",
  375. "TlsIP": "",
  376. "ProxyIP": "[app_host]",
  377. "ProxyPort": "80",
  378. "Info": "Proxy"
  379. },
  380. {
  381. "Name": "🔵 TIM EXPIRADO [13]",
  382. "FLAG": "tim.png",
  383. "Payload": "MERGE ok.ru HTTP/1.1[crlf]Host: ok.ru[crlf]Connection: upgrade, Keep-Alive[crlf]Upgrade: HTTP/2.0[crlf]User-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)[crlf]Referer: http://www.google.com[crlf]",
  384. "SNI": "",
  385. "TlsIP": "",
  386. "ProxyIP": "[app_host]",
  387. "ProxyPort": "80",
  388. "Info": "Direct"
  389. },
  390. {
  391. "Name": "🔵 TIM EXPIRADO [14]",
  392. "FLAG": "tim.png",
  393. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  394. "SNI": "",
  395. "TlsIP": "",
  396. "ProxyIP": "[app_host]",
  397. "ProxyPort": "80",
  398. "Info": "Proxy"
  399. },
  400. {
  401. "Name": "🔵 TIM EXPIRADO [15]",
  402. "FLAG": "tim.png",
  403. "Payload": "ACL HTTP/1.1[lf]Host: google.es[lf]",
  404. "SNI": "",
  405. "TlsIP": "",
  406. "ProxyIP": "[app_host]",
  407. "ProxyPort": "80",
  408. "Info": "Proxy"
  409. },
  410. {
  411. "Name": "⚠️ TIM E VIVO FLARE",
  412. "FLAG": "tim.png",
  413. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  414. "SNI": "conexao.techvpn.ml",
  415. "TlsIP": "",
  416. "ProxyIP": "::ffff:6810:336f",
  417. "ProxyPort": "80",
  418. "Info": "Proxy"
  419. },
  420. {
  421. "Name": "🟡 OI FLARE [01]",
  422. "FLAG": "oi",
  423. "Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket [crlf][crlf]",
  424. "SNI": "",
  425. "TlsIP": "",
  426. "ProxyIP": "13.226.52.28",
  427. "ProxyPort": "80",
  428. "Info": "Proxy"
  429. },
  430. {
  431. "Name": "🟡 OI FLARE [02]",
  432. "FLAG": "oi",
  433. "Payload": "GET ws://www.hbogo.com.br HTTP/1.1\nHost: [app_host]\nUpgrade: ws\n\n",
  434. "SNI": "www.hbogo.com.br",
  435. "TlsIP": "104.16.53.91",
  436. "ProxyIP": "",
  437. "ProxyPort": "",
  438. "Info": "Tlsws"
  439. },
  440. {
  441. "Name": "🟡 OI FLARE [03]",
  442. "FLAG": "oi",
  443. "Payload": "GET sni://www.hbogo.com.br HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: websocket[crlf][crlf]",
  444. "SNI": "www.hbogo.com.br",
  445. "TlsIP": "104.16.51.91",
  446. "ProxyIP": "",
  447. "ProxyPort": "",
  448. "Info": "Tlsws"
  449. },
  450. {
  451. "Name": "🟡 OI FLARE [04]",
  452. "FLAG": "oi",
  453. "Payload": "GET wss://bam.nr-data.net HTTP/1.1[crlf]Host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]",
  454. "SNI": "bam.nr-data.net",
  455. "TlsIP": "bam.nr-data.net",
  456. "ProxyIP": "",
  457. "ProxyPort": "",
  458. "Info": "Tlsws"
  459. },
  460. {
  461. "Name": "🟡 OI FLARE [05]",
  462. "FLAG": "oi",
  463. "Payload": "POST /connect/domainreliability/upload HTTP/1.1 [lf]Host:[app_host][split][crlf]Upgrade: Websocket;Access-Control-Request-Method: POST;Access-Control-Allow-Origin: *;Save-Data: no;Connection: keep-alive;Keep-Alive: timeout=43200, max=71200;Cache-control: public max-age=16777216 immutable;Content-Length: 16777216;Upgrade-Insecure-Requests: 1/n/n[crlf][crlf]",
  464. "SNI": "",
  465. "TlsIP": "",
  466. "ProxyIP": "104.16.53.111",
  467. "ProxyPort": "80",
  468. "Info": "Proxy"
  469. },
  470. {
  471. "Name": "🟡 OI FLARE [06]",
  472. "FLAG": "oi",
  473. "Payload": "GET / HTTP/1.1\nHost: blog.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  474. "SNI": "meganet.ascnet.tk",
  475. "TlsIP": "",
  476. "ProxyIP": "104.19.239.25",
  477. "ProxyPort": "80",
  478. "Info": "Proxy"
  479. },
  480. {
  481. "Name": "🟡 OI FLARE [07]",
  482. "FLAG": "oi",
  483. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host] \nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  484. "SNI": "",
  485. "TlsIP": "",
  486. "ProxyIP": "104.19.239.25",
  487. "ProxyPort": "80",
  488. "Info": "Proxy"
  489. },
  490. {
  491. "Name": "🟡 OI FLARE [08]",
  492. "FLAG": "oi",
  493. "Payload": "GET / HTTP/1.1[crlf]Host: cdn.c6bank.com.br[crlf]Expect: 100-continue[crlf][crlf][split][crlf][crlf]ACL / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf][crlf]",
  494. "SNI": "",
  495. "TlsIP": "",
  496. "ProxyIP": "104.19.239.25",
  497. "ProxyPort": "80",
  498. "Info": "Proxy"
  499. },
  500. {
  501. "Name": "🟡 OI FLARE [09]",
  502. "FLAG": "oi",
  503. "Payload": "GET / HTTP/1.1\nHost: api.sandbox.c6bank.com.br\nExpect: 100-continue\n\n[split]\n\nACL /?/ HTTP/1.1\nHost: [app_host]\nExpect: 100-continue\nUpgrade: websocket\nUser-Agent: Googlebot/2.1 (+http://www.google.com/bot.html)\n\n",
  504. "SNI": "",
  505. "TlsIP": "",
  506. "ProxyIP": "104.19.239.25",
  507. "ProxyPort": "80",
  508. "Info": "Proxy"
  509. }
  510. ]
  511. }

comments powered by Disqus