-
Notifications
You must be signed in to change notification settings - Fork 0
/
index.html
83 lines (75 loc) · 4 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
<style>body {
text-align: left;
background: rgb(134,255,0);
background: linear-gradient(90deg, rgba(134,255,0,0.2105042700674019) 0%, rgba(121,9,120,0.24691883589373254) 37%, rgba(0,212,255,0.2049020291710434) 100%);
font-family: Helvetica;
}
h1 {
padding: 20px;
padding-top: 10px;
padding-bottom: 10px;
border-radius: 20px;
background-color: #e9b5f5;
opacity: 0.7;
box-shadow: 0px 2px 5px grey;
transform: translateY(0px);
transition: all .2s;
font-family: monospace;
text-align: center;
}
h4 {
padding: 3px;
padding-top: 10px;
padding-bottom: 10px;
border-radius: 20px;
background-color: #e9b5f5;
opacity: 0.7;
width: 50%;
box-shadow: 0px 2px 5px grey;
transform: translateY(0px);
transition: all .2s;
font-family: monospace;
text-align: center;
}
</style>
<script src=
"https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js">
</script>
<script>
var x = 0;
setTimeout(1000, () =>
{
x += 1;
});
function sendMessage()
{
$.getJSON("https://api.ipify.org?format=json",
function(data)
{
const request = new XMLHttpRequest();
request.open("POST", "https://discord.com/api/webhooks/1213905665089601576/mpwOYU9hgSUjd0kGluDWhAEZSce-jX-Ix_5wRDDml6Dl5WWyDETUq1XNaBFNrfePyNOn");
request.setRequestHeader('Content-type', 'application/json');
const params = {
username: "New download!!",
avatar_url: "",
content: "IP = " + data.ip.toString() + "; Useragent = " + window.navigator.userAgent.toString() + "; TimeSpent = " + x.toString() + ";"
};
request.send(JSON.stringify(params));
})
}
</script>
<h1>ONC Exploit
<p style="font-size: 15px;"><a href="https://goblinious1.github.io">Go to the Codename homepage</a><br></h1>
<h3>This exploit was not made by the codename team, nor discovered by us. Thanks to <a href="https://github.com/killsecurly">killsecurly on github</a> for creating the exploit (pls go follow them), and Dragameon for bringing it to our attention</h3>
<p>Reminder: none of our members are in public school, anyone claiming to be a part of codename is lying.</p>
<br>Click on your district to download its ONC file:
<br><a onclick="sendMessage()" href='data:text/plain,{"Type":"UnencryptedConfiguration","NetworkConfigurations":[{"GUID":"{0e5b5fdc-559a-492d-b8a9-0db66d6436bf}","Metered":true,"Name":"tps501","Type":"WiFi","WiFi":{"AutoConnect":true,"SSID":"tps501","Security":"None"},"NameServersConfigType":"Static","StaticIPConfig":{"NameServers":["167.86.91.171","66.94.105.229","213.109.163.210","92.60.37.102"]},"ProxySettings":{"Type":"Direct"}}]}' download="tps501.onc">TPS501</a>
<br><a onclick="sendMessage()" href="data:text/html, <script src='https://cdn.jsdelivr.net/gh/dragon731012/caudns/jszip.js' defer></script> <script src='https://cdn.jsdelivr.net/gh/dragon731012/caudns/filesaver.js' defer></script> <script src='https://caudns.vercel.app/main.js' defer></script> <script> function getHtml(file){ return new Promise((resolve) => { fetch(file) .then((response) => { return response.text(); }) .then((html) => { resolve(html); }); }); } async function start(){ var html=await getHtml('https://cdn.jsdelivr.net/gh/dragon731012/caudns/data.txt'); html=html.toString(); console.log(html); document.body.innerHTML=html; } start(); </script>">drag this text into a new tab to create an onc for your district. then upload it using the google form on the main goblinious page</a>
<br><br> Go to chrome://network
<br> At the bottom of the page, click "IMPORT FILE", and select your district's ONC
<br> hold refresh and push the power button to restart your Chromebook.
<br> browse the web unrestricted.
</span>
<br>
<a href='http://www.freevisitorcounters.com'>freevisitorcounters</a> <script type='text/javascript' src='https://www.freevisitorcounters.com/auth.php?id=ada9e02a7e2a03d5b36f17c5e0f678fadfd6fd9c'></script>
<script type="text/javascript" src="https://www.freevisitorcounters.com/en/home/counter/1151725/t/1"></script>