AS MELHOREES PAYLOADS PARA MODO SOCKETS SECURITY SSH SCRIPT 🟣
[delay_split]ACL /Set-Cookie: sessionID=fbafa6258966f49f252b404ab9e5c219; path=/admin; domain=revive.vivointernetgratis.com.br; secure; HttpOnly; SameSite=strict HTTP/1.1][lf]
[delay_split]ACL /revive.vivointernetgratis.com.br HTTP/1.1][lf]
[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote
HTTP/1.1[lf][lf]
[split] [method] [host_port]GET sdp.vivo.com.br/ [protocol][crlf]Proxy-Authorization: [auth]Host: sdp.vivo.com.br[crlf][crlf]MOVE http://www.portalsva2.vivo.com.br/captive-static/tarif-def/pd/index.html HTTP/1.1[crlf][crlf]
[delay_split]CONNECT navegue.vivo.ddivulga.com/pacote HTTP/1.1[lf][lf]
[delay_split]GET http://m.clarosync.com/ HTTP/1.1 Host: http://m.clarosync.com/
User-Agent: Yes
Connection: close
Proxy-Connection: Keep-Alive
[crlf][crlf][netData][crlf] [crlf][crlf]
[delay_split]GET http://d1n212ccp6ldpw.cloudfront.net HTTP/1.1\n\r\n\r\nCONNECT 127.0.0.1:443HTTP/1.0X-Online-Host: http://download-this-pl.info/124BR/MP.html \r\n\r\n
[delay_split]CONNECT http://i.vivo.ddivulga.com/i/gp/ HTTP/1.1[crlf][split]
[delay_split]CONNECT http://interatividade.vivo.ddivulga.com/produto/ HTTP/1.0[crlf]<font color="black">[split]
[delay_split]CONNECT http://navegue.vivo.ddivulga.com/pacote/ HTTP/1.1[crlf]<font color="yes">[split]
[delay_split]CONNECT http://portalrecarga.vivo.com.br/recarga/home/ HTTP/1.1[lf]
[split]\nCONNECT [host_port]@portalrecarga.vivo.com.br/recarga/home/[protocol]\nGET http://sdp.vivo.com.br/ HTTP/1.1\nHost: portalrecarga.vivo.com.br/recarga/home/produto[crlf]X-Forwarded-For: portalrecarga.vivo.com.br/recarga/home/\n\n\n
[delay_split]CONNECT [host_port]<font color="yelp"> GET http://portalrecarga.vivo.com.br/recarga/home/187.8.166.33 [protocol][lf][split]CONNECT 187.8.166.33 CONNECT [host_port]149.56.42.236 HTTP/1.1[crlf][crlf]
[delay_split][lf]GET / HTTP/1.1[lf]Host: vivo.com.br[lf]
{
"Name": "TIM 01 (Saldo válido)",
"Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"ProxyIP": "104.19.239.25",
"FLAG": "ic_t.png",
"Info": "proxyCDN"
},
{
"Name": "TIM 02 (Saldo válido)",
"Payload": "CONNECT / HTTP/1.1[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]",
"SNI": "",
"ProxyIP": "104.16.53.111",
"FLAG": "ic_t.png",
"Info": "proxyCDN"
},
{
"Name": "TIM 03 (Saldo válido)",
"Payload": "CONNECT / HTTP/1.1[crlf]host: atendimento.lojadointer.com.br[crlf][crlf][split][crlf]TOPSPEED- / HTTP/1.1[crlf]host: [app_host][crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf]TSTOPSPEED[crlf][crlf]",
"SNI": "",
"ProxyIP": "104.17.64.225",
"FLAG": "ic_t.png",
"Info": "proxyCDN"
},
{
"Name": "TIM 04 (Saldo válido)",
"Payload": "CONNECT / HTTP/1.9[crlf]host: no.descomplica.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"ProxyIP": "104.19.241.93",
"FLAG": "ic_t.png",
"Info": "proxyCDN"
},
{
"Name": "TIM 05 (Sem saldo)",
"Payload": "HTTP/1.1 [lf]CONNECT HTTP/1.1[lf][lf]|[lf]",
"SNI": "",
"ProxyIP": "[app_host]",
"FLAG": "ic_t.png",
"Info": "proxyCDN"
},
{
"Name": "TIM 06 (Sem saldo)",
"Payload": "CONNECT [app_host] [protocol][crlf][crlf]",
"SNI": "",
"ProxyIP": "",
"FLAG": "ic_t.png",
"Info": "direct"
},
{
"Name": "CLARO 01 (PREZÃO)",
"Payload": "",
"SNI": "web.whatsapp.com",
"ProxyIP": "",
"FLAG": "ic_c.png",
"Info": "ssl"
},
{
"Name": "CLARO 02 (FLEX)",
"Payload": "",
"SNI": "m.twitter.com.",
"ProxyIP": "",
"FLAG": "ic_c.png",
"Info": "ssl"
},
{
"Name": "CLARO 03 (CONTROLE)",
"Payload": "",
"SNI": "m.waze.com.",
"ProxyIP": "",
"FLAG": "ic_c.png",
"Info": "ssl"
},
{
"Name": "CONEXÃO 01 (Fluke 01)",
"Payload": "GET http://web.whatsapp.com HTTP/1.0[crlf]Host: web.whatsapp.com[crlf]Connection: keep-alive[crlf][crlf]",
"SNI": "",
"ProxyIP": "",
"FLAG": "ic_f.png",
"Info": "direct"
},
{
"Name": "CONEXÃO 02 (Fluke 02)",
"Payload": "",
"SNI": "web.whatsapp.com",
"ProxyIP": "",
"FLAG": "ic_f.png",
"Info": "ssl"
},
{
"Name": "TIM APP ",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: [rotate=app.sandbox.c6bank.com.br][crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"Sni": "",
"TlsIP": "",
"ProxyIP": "104.18.33.113",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM SALDO VÁLIDO💙💙 3",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online [crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "104.18.27.160",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM SALDO VÁLIDO💙💙 4",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online [crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "104.16.51.111",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "🟣🔵 *TIM 1* 🔵🟣",
"FLAG": "vivo",
"Payload": "GET / HTTP/1.1[crlf]Host: [app_host][crlf]Upgrade: Websocket[crlf]Connection: Keep-Alive[crlf][crlf]",
"SNI": "ribeironetvpn.online",
"TlsIP": "itsupport.surveymonkey.com",
"ProxyIP": "172.64.154.143",
"ProxyPort": "443",
"Info": " Proxy"
},
{
"Name": "TIM SALDO VÁLIDO💙💙13",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "104.19.239.25",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM SALDO VÁLIDO💙💙14",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host:[app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "172.64.154.143",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM RAPIDA 01",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "172.64.154.143",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM RAPIDA 02",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: mtls.sandbox.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: ribeironetvpn.online[crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "172.64.154.143",
"ProxyPort": "80",
"Info": "Proxy"
},
{
"Name": "TIM PRE",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: pre-onboarding-p.c6bank.app[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [random=ribeironetvpn.online][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "104.19.239.25",
"ProxyPort": "80",
"Info": "Proxy"
},
MasterPay - SSH:
VIVO TIM E CLARO CLOUDFRONT
TESTEM NOS DDD DE VCS
sni: recargavivoweb.m4u.com.br
proxy: recargavivoweb.m4u.com.br
porta: 443
Testem e diga se realmente ta on no seu ddd !
{
"Name": "VIVO-TIM-CLARO",
"FLAG": "vivo",
"Payload": "GET ws://d31wdt0autrhy8.cloudfront.net/ HTTP/1.1[lf]Host: recargavivoweb.m4u.com.br[lf]Connection: Upgrade[lf]Upgrade: websocket[lf][lf]",
"SNI": "recargavivoweb.m4u.com.br",
"TlsIP": "recargavivoweb.m4u.com.br",
"ProxyIP": "",
"ProxyPort": "443",
"Info": "Tlsws"
},
Foram encontrados 4 Quatro domínios
Hospedados No Mesmo Servidor Da Web.
recargavivoweb.m4u.com.br
(52.67.196.73).
Claro Front
claro-recarga.m4u.com.br
Tim Front!..
plataforma-recarga.m4u.com.br
Universal Vivo Front
recargavivoweb.m4u.com.br
vivo-recarga.m4u.com.br
"m4u.com.br"
M4u Serviços Telecom.
TIM SALDO VALIDO CLOUDFLARE PRO
PROXY: 104.19.239.25
PROXY: 104.18.99.70
PROXY: 104.18.33.113
PROXY: atendimento.lojadointer.com.br
SNI PRA HOST DA PAYLOAD
mtls.sandbox.c6bank.com.br
www.c6bank.com.br
celular.c6bank.app
app.sandbox.c6bank.com.br
pre-onboarding-p.c6bank.app
mobile.hom.c6bank.app
creatorsupport.deezer.com
ubisoft.c6bank.com.br
Porta : 80
{
"Name": "🔵TIM DO BRASIL🔵",
"FLAG": "tim",
"Payload": "CONNECT / HTTP/1.9[crlf]host: www.c6bank.com.br[crlf][crlf][split][crlf]OPTIONS- // HTTP/1.9[crlf]host: [app_host][crlf]Expect: 200-continue[crlf]Proxy-Connection: Keep-Alive[crlf]Keep-Alive: timeout=5, max=1000[crlf]Connection: Upgrade[crlf]Upgrade: websocket[crlf]Sec WebSocketExtensions: superspeed[crlf]Last-Modified: Fri, 17 March 2022 04:32:39 GMT[crlf]Server: Qnax[crlf]User-Agent: Mozilla/5.0 (Linux; Android 4.4.2); Nexus 5 Build/KOT49H) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.117 Mobile Safari/537.36 OPR/20.0.1396.72047[crlf][crlf]",
"SNI": "",
"TlsIP": "",
"ProxyIP": "104.16.239.166",
"ProxyPort": "80",
"Info": "Proxy"
},
✅Payloads Novas🟣VIVO SECURITY🟣
Testem nos seus ddds e regiões 👍✅✔️
[split][lf]ACL / HTTP/1.1[crlf]Host: portalrecarga.vivo.com.br[crlf]Upgrade: Upgrade[crlf]Connection: [crlf][crlf]
[split][lf]TRACE / HTTP/1.1[crlf]Host: vivo.tl[crlf]Upgrade: WebSocketExtensions[crlf]Connection: Upgrade-Insecure-Requests[crlf][crlf]
[split][lf]PUT / HTTP/1.1[crlf]Host: gratis.vivo-bemobi.com[crlf]Upgrade: WebSocketExtensions[crlf]Connection: [crlf][crlf]
[split][lf]ACL / HTTP/1.1[crlf]Host: microsoft.com[crlf]Upgrade: Upgrade[crlf]Connection: Upgrade[crlf][crlf]
[split][lf]PUT / HTTP/1.1[crlf]Host: amazonaws.com[crlf]Upgrade: Keep-Alive[crlf]Connection: Upgrade[crlf][crlf]
PAYLOADS RÁPIDAS VIVO WEBSOCKET SECURITY💜
[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]
[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]
[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf]
[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf]
[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf]
[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]
TIM EXPIRADO
ACL HTTP/ \nhost: www.google.com[lf]
Testem ai galera! Informe o ddd.
vivo Websocket CloudFlare
GET / HTTP/1.1[crlf]Host: seucloudfire [crlf]Connection: Upgrade[crlf]Upgrade: Websocket[crlf][crlf]
proxy: unpkg.com
porta: 80
Testem nos ddds de vocês.
VIVO SECURITY ROTATE : DTUNNEL
PAYLOND :
[split][delay_split]ACL / /\n#[split]GET HTTP/1.1[crlf][crlf]Host: Websocket[crlf]#[split]GET HTTP/1.1[crlf][crlf]HTTP/2: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]HTTP/2: [crlf]#[split]GET HTTP/1.1[crlf][crlf]QUICK/11: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]QUIC/11: Ua[crlf]#[split]GET HTTP/1.1[crlf][crlf]QUIC/11:80 Ua[crlf]
PROXY : IP DA VPS
@masterpayssh
Testem nos ddds de vocês conexão rápida.
