a
/
bifm
2
2
Fork 4
Code Issues Pull Requests Projects Releases Wiki Activity

fix vuln

Browse Source
main
aria 8 months ago
parent 80c6061215
commit fa9a5445a1
Signed by: a
GPG Key ID: E851AE999FFCBC37
5 changed files with 35 additions and 116 deletions
Show Stats Download Patch File Download Diff File

2
extractors/ez4.js
Unescape Escape View File

@ -1,6 +1,4 @@
const pw = require("playwright-extra");
const { PlaywrightBlocker } = require("@cliqz/adblocker-playwright");
const fetch = require("cross-fetch");
const stl = require("puppeteer-extra-plugin-stealth");
const lib = require("../lib");

1
extractors/gplinks.js
Unescape Escape View File

@ -1,7 +1,6 @@
const pw = require("playwright-extra");
const { PlaywrightBlocker } = require("@cliqz/adblocker-playwright");
const fetch = require("cross-fetch");
const stl = require("puppeteer-extra-plugin-stealth");
const lib = require("../lib");
module.exports = {

135
extractors/linkvertise.js
Unescape Escape View File

@ -1,4 +1,7 @@
const got = require("got");
const pw = require("playwright-extra");
const stl = require("puppeteer-extra-plugin-stealth");
const { PlaywrightBlocker } = require("@cliqz/adblocker-playwright");
const fetch = require("cross-fetch");
const lib = require("../lib");
module.exports = {
@ -17,121 +20,29 @@ module.exports = {
requiresCaptcha: true,
get: async function(url, opt) {
try {
let header = (lib.config.defaults?.got?.headers || lib.config.defaults?.axios?.headers || {});
if (lib.config.debug == true) console.log("[linkvertise] Launching browser...");
let blocker = await PlaywrightBlocker.fromPrebuiltFull(fetch);
let stlh = stl();
stlh.enabledEvasions.delete("user-agent-override");
pw.firefox.use(stlh);
let proxy;
if (lib.config.defaults?.got?.proxy) {
if (lib.config.defaults?.got?.proxy?.type == "socks5") {
const agent = require("socks-proxy-agent");
try {
if ((new URL(prox).hostname == "localhost" || new URL(prox).hostname == "127.0.0.1") && new URL(proxy).port == "9050") {
proxy = {};
} else {
proxy = {httpsAgent: (new agent.SocksProxyAgent(prox))};
}
} catch(err) {
proxy = {};
}
} else {
proxy = {};
}
if (lib.config.captcha.active == false) {
throw "Captcha service is required for this link, but this instance doesn't support it."
}
let id;
if (new URL(url).hostname == "linkvertise.download") {
id = new URL(url).pathname.split("/").slice(2, 4).join("/");
} else {
id = new URL(url).pathname.split("/").slice(1, 3).join("/");
}
if (lib.config.debug == true) console.log("[linkvertise] Got ID from URL:", id);
header["User-Agent"] = "Mozilla/5.0 (iPhone; CPU iPhone OS 13_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.1 Mobile/15E148 Safari/604.1";
header.Accept = "application/json";
header["Accept-Encoding"] = "gzip, deflate";
header["Accept-Language"] = "en-US,en;q=0.5";
header.Connection = "keep-alive";
header.Origin = "https://linkvertise.com";
header.Referer = "https://linkvertise.com/";
header["Sec-Fetch-Dest"] = "empty";
header["Sec-Fetch-Mode"] = "cors";
header["Sec-Fetch-Site"] = "same-site";
header["TE"] = "trailers";
if (lib.config.debug == true) console.log("[linkvertise] Getting user token...");
let resp = await got({
method: "GET",
headers: header,
url: `https://publisher.linkvertise.com/api/v1/redirect/link/static/${id}?origin=&resolution=1920x960`
});
resp.body = JSON.parse(resp.body);
let type;
if (resp.body?.data.link.target_type == "URL") {
type = "target";
} else if (resp.body?.data.link.target_type == "PASTE") {
type = "paste";
} else {
throw "Unknown target type.";
}
let rp = resp.body?.data.link.id;
let ut = resp.body?.user_token;
if (lib.config.debug == true) console.log("[linkvertise] Got user token:", ut);
let ck;
if (lib.config.debug == true) console.log("[linkvertise] Doing CAPTCHA to validate traffic...");
header["Content-Type"] = "application/json";
if (new URL(url).hostname !== "linkvertise.com") url = `https://linkvertise.com/${url.split("/").slice(3).join("/")}`;
let tk = await lib.solve("6LcEr_UUAAAAAHXt5wx-k9P_m8Z1JY-Ck9Mxrhxo", "recaptcha", {referer: url});
let d = JSON.stringify({
token: tk,
type: "rc"
});
header["Content-Length"] = lib.byteCount(d);
if (lib.config.debug == true) console.log("[linkvertise] Sending CAPTCHA result to get CAPTCHA token...");
resp = await got({
body: d,
method: "POST",
headers: header,
url: `https://publisher.linkvertise.com/api/v1/redirect/link/${id}/traffic-validation?X-Linkvertise-UT=${ut}`
});
let args = (lib.config.defaults?.puppeteer || {headless: true});
b = await pw.firefox.launch(args);
let p = await b.newPage();
await blocker.enableBlockingInPage(p);
await p.goto(url);
await p.waitForSelector("#ngrecaptcha-0");
if (lib.config.debug == true) console.log(`[linkvertise] Completing CAPTCHA...`);
resp.body = JSON.parse(resp.body);
ck = resp.body?.data.tokens.TARGET;
if (lib.config.debug == true) console.log("[linkvertise] Got CAPTCHA token: ", ck);
let fb = {};
fb.serial = Buffer.from(JSON.stringify({
timestamp: new Date() * 1,
random: "6548307",
link_id: rp
})).toString("base64");
if (ck !== undefined) fb.token = ck;
fb = JSON.stringify(fb);
header["Content-Type"] = "application/json";
header["Content-Length"] = lib.byteCount(fb);
if (lib.config.debug == true) console.log("[linkvertise] Sending final request...");
resp = await got({
body: fb,
method: "POST",
headers: header,
url: `https://publisher.linkvertise.com/api/v1/redirect/link/${id}/${type}?X-Linkvertise-UT=${ut}`
});
resp.body = JSON.parse(resp.body);
return (resp.body?.data.paste || resp.body?.data.target);
await lib.solveThroughPage(p);
console.log("[linkvertise] Solved")
} catch(err) {
throw err;
}

11
lib.js
Unescape Escape View File

@ -481,11 +481,22 @@ async function solveThroughPage(p) {
if (config.debug == true) console.log("[captcha] Retrieved. Solving CAPTCHA...");
let c = await solveCaptcha(sk, type, {referer: (await p.url())});
// callback-based captchas
if (type == "hcaptcha") {
let id = await p.evaluate(function() {return document.querySelector("iframe[title='widget containing checkbox for hCaptcha security challenge']").src.split("id=")[1].split("&")[0];});
let json = JSON.stringify({id: id, label: "challenge-closed", source: "hcaptcha", contents: {event: 'challenge-passed', expiration: 120, response: c}});
await p.evaluate(`window.postMessage('${json}', '*');`);
} else {
let captchaObject = await p.evaluate(function() {return ___grecaptcha_cfg?.clients?.[0]});
for (let index in captchaObject) {
for (let index_ in index) {
console.log(captchaObject[index][index_]);
break;
}
break;
}
}

2
server.js
Unescape Escape View File

@ -5,7 +5,7 @@ const app = express();
app.use(express.static("static/"));
app.set("view engine", "ejs");
app.listen(lib.config.http.port, function() {
app.listen(lib.config.http.port, "127.0.0.1", function() {
console.log(`[http] Listening on HTTP port ${lib.config.http.port}`);
if (lib.config.debug == true) console.log("[config] Debug is enabled.");
console.log("[config] Listing current config", lib.config);

Write Preview
Loading…
Cancel
Save