[Henryabach [ Posting Freak ] Start Conversation]

Twitter.com/ClumsyLulz

$ curl -i -X POST "https://doxbin.com"
HTTP/2 200
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: _ddg1=YPFqH7KPbEa8tc0JjNws; Domain=.doxbin.com; HttpOnly; Path=/; Expires=Mon, 10-Apr-2023 02:09:37 GMT
date: Sun, 10 Apr 2022 02:09:38 GMT
content-type: text/html
content-length: 1118
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache


<script src="/vddosw3data.js"></script>
<script type="text/javascript" src="/aes.min.js" ></script>

<script>
w3IncludeHTML();
</script>
<script>function toNumbers(d){var e=[];d.replace(/(..)/g,function(d){e.push(parseInt(d,16))});return e}function toHex(){for(var d=[],d=1==arguments.length&&arguments[0].constructor==Array?arguments[0]:arguments,e="",f=0;f
d[f]?"0":"")+d[f].toString(16);return e.toLowerCase()}var b1=atob("ZjJkODI0N2FkYzg3NzZmYjM5YjdiOThmN2IxMWQyYzg="),b2=toNumbers(b1),_0xe8f2=["\x34\x36\x36\x62\x36\x66\x62\x62\x62\x64\x61\x37\x31\x34\x63\x31\x32\x38\x65\x37\x32\x33\x32\x30\x39\x37\x33\x30\x33\x37\x65\x63"];a1= toNumbers(_0xe8f2[0]),c3=toNumbers("ee51bb599688ca58dfd26b455c165c74");document.cookie="vDDoS="+toHex(slowAES.decrypt(c3,2,a1,b2))+"; path=/";setTimeout("location.href='https://doxbin.com:443/';",5000);
</script>





https://doxbin.com
data-sitekey="6LeKbyodAAAAAHNxcc6fkCVFSzKgXNm_d1XF7iTB



<script>
$('#login-form').on('submit', function(e){
$.post('/login', {
username: $('#username').val(),
password: $('#password').val(),
_token: $('input[name=_token]').val(),
"g-recaptcha-response": $('[name=g-recaptcha-response]').val()
}, function(resp){
if(resp.status == "err"){
$('#error-msg').text(resp.msg);
grecaptcha.reset()
}else{
window.location = '/';
}
});
e.preventDefault();
});
</script>



https://keybase.io/_/api/1.0/getsalt.jso...in_session

https://www.mediafire.com/file/9kuitwnm0...n.zip/file

https://www.mediafire.com/file/e629ehmx3...s.zip/file

https://github.com/Jihadi4Prez/Boatnet.u...1naryv4.py

https://doxbin.com/vddosw3data.js

https://158.69.6.193:443/api/attack?usern...method=GET

Doxbin's botnet reverse engineered

By SleepTheGod
Twitter.com/ClumsyLulz