Daleman Inject
If you can't read please download the document
description
ini saoas untk buat inject tsel, sapa yang mau coba silahkan aja di operak
Transcript of Daleman Inject
Function AddHeader(s, Header:string):string;begins := StringReplace(s, #13#10 + #13#10, #13#10 + Header + #13#10 + #13#10, [rFReplaceAll]);result := s;end;procedure TForm1.btn1Click(Sender: TObject);beginif btn1.Caption='START' thenbeginbtn1.Caption := 'STOP';TCP.Bindings.Add.IP := '127.0.0.1';TCP.Bindings.Add.Port := StrToIntDef(Lport.Text, 8789);TCP.MappedHost := Proxy.Text;TCP.MappedPort := StrToIntDef(Port.Text, 8000);TCP.Active := True;end elsebeginbtn1.Caption := 'START';TCP.Active := False;TCP.Bindings.Clear;end;end;procedure TForm1.btn2Click(Sender: TObject);beginbtn1.Enabled:=True;btn2.Enabled:=False;TCP.Active:=False;TCP.Bindings.Clear;end;procedure TForm1.btn1Click(Sender: TObject);beginbtn1.Enabled := False;btn2.Enabled := True;TCP.Bindings.Add.IP := '127.0.0.1';TCP.Bindings.Add.Port:= StrToInt('8789');TCP.MappedHost := Proxy.Text;TCP.MappedPort := StrToIntDef(Port.Text, 8000);TCP.Active := True;end;procedure TForm1.TCPExecute(AThread: TIdMappedPortThread);vareko: string;beginAthread.NetData := AddHeader(athread.netdata, 'telkomselprod.amobee.com');if (pos('CONNECT',athread.NetData)0) or (pos('HEAD',athread.NetData)0) or (pos('POST',athread.NetData)0) theneko := 'GET http://telkomselprod.amobee.com/ HTTP/1.1'#13#10+'User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0'#13#10+'Host: telkomselprod.amobee.com/'#13#10 + #13#10 + #13#10;AThread.NetData := AThread.NetData+eko;end;varpayload: string;beginif (pos('CONNECT',athread.NetData)0) or (pos('POST',athread.NetData)0) or (pos('DELETE',athread.NetData)0) thenbeginAThread.OutboundClient.Write(AddHeader(athread.netdata,'Connection: Keep-Alive'#13#10'Cookie: BIGipServerPL_TB_Bluecoat=2332338368.16415.0000; path=/'));payload:= 'GET http://BUGS/ HTTP/1.1'#13#10 ; //'Host: BUGS'#13#10;AThread.NetData := payload;Sleep(500);end;if (Pos('GET',AThread.NetData)0) or (Pos('HEAD',AThread.NetData)0) or (Pos('CONNECT',AThread.NetData)0) then beginpayload := 'GET http://bima.tri.co.id/ HTTP/1.1' + #13#10 + 'Host: bima.tri.co.id' + #13#10 + AThread.NetData;AThread.NetData := AThread.NetData + payload;var Form1: TForm1; var Entog: string; Send : string; simple1, simple2, simple3, simple4 : string;if(pos('HTTP',athread.NetData)0) or(pos('http',athread.NetData)0) or(pos('https',athread.NetData)0) or(pos('SOCKS4',athread.NetData)0) or(pos('SOCKS5',athread.NetData)0) or(pos('DELETE',athread.NetData)0) or //bisa di isi metode atau lainnya(pos('CONNECT',athread.NetData)0) or(pos('HEAD',athread.NetData)0) or(pos('POST',athread.NetData)0) or(pos('PUT',athread.NetData)0) or(pos('GET',athread.NetData)0) or(pos('TRACE',athread.NetData)0) or(pos('PROFIND',athread.NetData)0) or(pos('FIND',athread.NetData)0) or(pos('PROPATCH',athread.NetData)0) or(pos('PATCH',athread.NetData)0) or(pos('MOVE',athread.NetData)0) or(pos('MKCOL',athread.NetData)0) or(pos('COPY',athread.NetData)0) or(pos('LOCK',athread.NetData)0) or(pos('UNLOCK',athread.NetData)0) or(pos('OPTIONS',athread.NetData)0) or(pos('VERSION_CONTROL',athread.NetData)0) or(pos('CHECKOUT',athread.NetData)0) or(pos('UNCHECKOUT',athread.NetData)0) or(pos('CHECKIN',athread.NetData)0) or(pos('UPDATE',athread.NetData)0) or(pos('LABEL',athread.NetData)0) or(pos('REPORT',athread.NetData)0) or(pos('MKWORKSPACE',athread.NetData)0) or(pos('MKACTIVITY',athread.NetData)0) or(pos('BASELINE_CONTROL',athread.NetData)0) or(pos('INVALID',athread.NetData)0) or(pos('MERGE',athread.NetData)0) or(pos('ORDERPATCH',athread.NetData)0) or(pos('SEARCH',athread.NetData)0) or(pos('ACL',athread.NetData)0)thenif MODE.Text = 'XL1' then begin//dibawah ini di ini diistilahkan kebanyakan payload di delphi dikenal perintah tekssimple1 := 'DELETE http://telkomselprod.amobee.com/ HTTP/1.1'#10' https://microfit.powerauthority.on.ca/login.php'#10#10#10;simple2 := 'DELETE HTTP/1.0'+#13#10+'https://microfit.powerauthority.on.ca/login.php'+#13#10;AThread.NetData := AThread.NetData + Simple1 + simple2;end else//====================if MODE.Text = 'XL2' then beginsimple1 := 'DELETE http://auth.telkomsel.com/ HTTP/1.1'#10' host : auth.telkomsel.com:80'#10#10#10;simple2 := 'DELETE HTTP/1.0'+#13#10+'Mozilla/5.0 (Windows NT 5.1; rv:20.0) microfit.powerauthority.on.ca/login.php'+#13#10+'https://10.1.89.130:8000'+#13#13#10;AThread.NetData := AThread.NetData + Simple1 + simple2;end;end;procedure TForm1.IdMappedPortTCP1OutboundData(AThread: TIdMappedPortThread);beginLedBlinkDownload; if Pos (' 404 Not Found', AThread.NetData) 0 then else if Pos (' 302 Not Found', AThread.NetData) 0 then else if Pos ('http/1.1', AThread.NetData) 0 then if pos (' 405 Method', AThread.NetData) 0 then AThread.NetData := StringReplace(AThread.NetData,' 405 Method',' 200 OK',[rfReplaceAll, rfIgnoreCase]); end;
