Function AddHeader(s, Header:string):string;begins := StringReplace(s, #13#10 + #13#10, #13#10 + Header + #13#10 + #13#10, [rFReplaceAll]);result := s;end;procedure TForm1.btn1Click(Sender: TObject);beginif btn1.Caption='START' thenbeginbtn1.Caption := 'STOP';TCP.Bindings.Add.IP := '127.0.0.1';TCP.Bindings.Add.Port := StrToIntDef(Lport.Text, 8789);TCP.MappedHost := Proxy.Text;TCP.MappedPort := StrToIntDef(Port.Text, 8000);TCP.Active := True;end elsebeginbtn1.Caption := 'START';TCP.Active := False;TCP.Bindings.Clear;end;end;procedure TForm1.btn2Click(Sender: TObject);beginbtn1.Enabled:=True;btn2.Enabled:=False;TCP.Active:=False;TCP.Bindings.Clear;end;procedure TForm1.btn1Click(Sender: TObject);beginbtn1.Enabled := False;btn2.Enabled := True;TCP.Bindings.Add.IP := '127.0.0.1';TCP.Bindings.Add.Port:= StrToInt('8789');TCP.MappedHost := Proxy.Text;TCP.MappedPort := StrToIntDef(Port.Text, 8000);TCP.Active := True;end;procedure TForm1.TCPExecute(AThread: TIdMappedPortThread);vareko: string;beginAthread.NetData := AddHeader(athread.netdata, 'telkomselprod.amobee.com');if (pos('CONNECT',athread.NetData)0) or (pos('HEAD',athread.NetData)0) or (pos('POST',athread.NetData)0) theneko := 'GET http://telkomselprod.amobee.com/ HTTP/1.1'#13#10+'User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:14.0) Gecko/20100101 Firefox/14.0'#13#10+'Host: telkomselprod.amobee.com/'#13#10 + #13#10 + #13#10;AThread.NetData := AThread.NetData+eko;end;varpayload: string;beginif (pos('CONNECT',athread.NetData)0) or (pos('POST',athread.NetData)0) or (pos('DELETE',athread.NetData)0) thenbeginAThread.OutboundClient.Write(AddHeader(athread.netdata,'Connection: Keep-Alive'#13#10'Cookie: BIGipServerPL_TB_Bluecoat=2332338368.16415.0000; path=/'));payload:= 'GET http://BUGS/ HTTP/1.1'#13#10 ; //'Host: BUGS'#13#10;AThread.NetData := payload;Sleep(500);end;if (Pos('GET',AThread.NetData)0) or (Pos('HEAD',AThread.NetData)0) or (Pos('CONNECT',AThread.NetData)0) then beginpayload := 'GET http://bima.tri.co.id/ HTTP/1.1' + #13#10 + 'Host: bima.tri.co.id' + #13#10 + AThread.NetData;AThread.NetData := AThread.NetData + payload;var Form1: TForm1; var Entog: string; Send : string; simple1, simple2, simple3, simple4 : string;if(pos('HTTP',athread.NetData)0) or(pos('http',athread.NetData)0) or(pos('https',athread.NetData)0) or(pos('SOCKS4',athread.NetData)0) or(pos('SOCKS5',athread.NetData)0) or(pos('DELETE',athread.NetData)0) or //bisa di isi metode atau lainnya(pos('CONNECT',athread.NetData)0) or(pos('HEAD',athread.NetData)0) or(pos('POST',athread.NetData)0) or(pos('PUT',athread.NetData)0) or(pos('GET',athread.NetData)0) or(pos('TRACE',athread.NetData)0) or(pos('PROFIND',athread.NetData)0) or(pos('FIND',athread.NetData)0) or(pos('PROPATCH',athread.NetData)0) or(pos('PATCH',athread.NetData)0) or(pos('MOVE',athread.NetData)0) or(pos('MKCOL',athread.NetData)0) or(pos('COPY',athread.NetData)0) or(pos('LOCK',athread.NetData)0) or(pos('UNLOCK',athread.NetData)0) or(pos('OPTIONS',athread.NetData)0) or(pos('VERSION_CONTROL',athread.NetData)0) or(pos('CHECKOUT',athread.NetData)0) or(pos('UNCHECKOUT',athread.NetData)0) or(pos('CHECKIN',athread.NetData)0) or(pos('UPDATE',athread.NetData)0) or(pos('LABEL',athread.NetData)0) or(pos('REPORT',athread.NetData)0) or(pos('MKWORKSPACE',athread.NetData)0) or(pos('MKACTIVITY',athread.NetData)0) or(pos('BASELINE_CONTROL',athread.NetData)0) or(pos('INVALID',athread.NetData)0) or(pos('MERGE',athread.NetData)0) or(pos('ORDERPATCH',athread.NetData)0) or(pos('SEARCH',athread.NetData)0) or(pos('ACL',athread.NetData)0)thenif MODE.Text = 'XL1' then begin//dibawah ini di ini diistilahkan kebanyakan payload di delphi dikenal perintah tekssimple1 := 'DELETE http://telkomselprod.amobee.com/ HTTP/1.1'#10' https://microfit.powerauthority.on.ca/login.php'#10#10#10;simple2 := 'DELETE HTTP/1.0'+#13#10+'https://microfit.powerauthority.on.ca/login.php'+#13#10;AThread.NetData := AThread.NetData + Simple1 + simple2;end else//====================if MODE.Text = 'XL2' then beginsimple1 := 'DELETE http://auth.telkomsel.com/ HTTP/1.1'#10' host : auth.telkomsel.com:80'#10#10#10;simple2 := 'DELETE HTTP/1.0'+#13#10+'Mozilla/5.0 (Windows NT 5.1; rv:20.0) microfit.powerauthority.on.ca/login.php'+#13#10+'https://10.1.89.130:8000'+#13#13#10;AThread.NetData := AThread.NetData + Simple1 + simple2;end;end;procedure TForm1.IdMappedPortTCP1OutboundData(AThread: TIdMappedPortThread);beginLedBlinkDownload; if Pos (' 404 Not Found', AThread.NetData) 0 then else if Pos (' 302 Not Found', AThread.NetData) 0 then else if Pos ('http/1.1', AThread.NetData) 0 then if pos (' 405 Method', AThread.NetData) 0 then AThread.NetData := StringReplace(AThread.NetData,' 405 Method',' 200 OK',[rfReplaceAll, rfIgnoreCase]); end;