mirror of
				https://codeberg.org/crimeflare/cloudflare-tor
				synced 2025-11-04 10:27:05 +01:00 
			
		
		
		
	Upload files to 'ismitmlink'
This commit is contained in:
		
							parent
							
								
									848d54fa85
								
							
						
					
					
						commit
						cae10fcf94
					
				
					 3 changed files with 60 additions and 33 deletions
				
			
		| 
						 | 
				
			
			@ -1,7 +1,6 @@
 | 
			
		|||
const apiurl = 'https://searxes.danwin1210.me/collab/open/ismitm.php';
 | 
			
		||||
let mymemory = {};
 | 
			
		||||
 | 
			
		||||
function ismitm(f) {
 | 
			
		||||
function is_infected(f) {
 | 
			
		||||
	return new Promise((g, b) => {
 | 
			
		||||
		fetch(apiurl, {
 | 
			
		||||
			method: 'POST',
 | 
			
		||||
| 
						 | 
				
			
			@ -22,29 +21,51 @@ function ismitm(f) {
 | 
			
		|||
	});
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
browser.runtime.onMessage.addListener((request, sender, sendResponse) => {
 | 
			
		||||
	if (request && sender) {
 | 
			
		||||
		if (mymemory[request] != undefined) {
 | 
			
		||||
			let rlt = mymemory[request];
 | 
			
		||||
			if (Object.keys(mymemory).length > 20000) {
 | 
			
		||||
				let cnt = 1;
 | 
			
		||||
				for (let t in mymemory) {
 | 
			
		||||
					if (cnt > 10) {
 | 
			
		||||
						break;
 | 
			
		||||
					}
 | 
			
		||||
					mymemory[t] = null;
 | 
			
		||||
					delete mymemory[t];
 | 
			
		||||
					cnt++;
 | 
			
		||||
				}
 | 
			
		||||
			}
 | 
			
		||||
			browser.tabs.sendMessage(sender.tab.id, [request, rlt]);
 | 
			
		||||
		} else {
 | 
			
		||||
			ismitm(request).then(function (a) {
 | 
			
		||||
				mymemory[request] = a;
 | 
			
		||||
				browser.tabs.sendMessage(sender.tab.id, [request, a]);
 | 
			
		||||
			}, function () {
 | 
			
		||||
				browser.tabs.sendMessage(sender.tab.id, [request, false]);
 | 
			
		||||
			});
 | 
			
		||||
		}
 | 
			
		||||
function i_already_know_you(f) {
 | 
			
		||||
	if (!/^([a-z0-9_.-]{1,255})\.([a-z]{2,80})$/.test(f)) {
 | 
			
		||||
		return false;
 | 
			
		||||
	}
 | 
			
		||||
	return new Promise((g, b) => {
 | 
			
		||||
		browser.storage.local.get(f).then((ff) => {
 | 
			
		||||
			if (ff[f]) {
 | 
			
		||||
				if (ff[f] == 'y') {
 | 
			
		||||
					g(1);
 | 
			
		||||
				} else {
 | 
			
		||||
					g(-1);
 | 
			
		||||
				}
 | 
			
		||||
			} else {
 | 
			
		||||
				g(0);
 | 
			
		||||
			}
 | 
			
		||||
		}, () => {
 | 
			
		||||
			g(0);
 | 
			
		||||
		});
 | 
			
		||||
	});
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
function i_remember_you(f, t) {
 | 
			
		||||
	browser.storage.local.set({
 | 
			
		||||
		[f]: ((t) ? 'y' : 'n')
 | 
			
		||||
	});
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
browser.storage.local.clear().then(() => {
 | 
			
		||||
	browser.runtime.onMessage.addListener((request, sender, sendResponse) => {
 | 
			
		||||
		if (request && sender) {
 | 
			
		||||
			i_already_know_you(request).then((r) => {
 | 
			
		||||
				if (r == 1 || r == -1) {
 | 
			
		||||
					browser.tabs.sendMessage(sender.tab.id, [request, ((r == 1) ? true : false)]);
 | 
			
		||||
				}
 | 
			
		||||
				if (r == 0) {
 | 
			
		||||
					is_infected(request).then((a) => {
 | 
			
		||||
						i_remember_you(request, a);
 | 
			
		||||
						browser.tabs.sendMessage(sender.tab.id, [request, a]);
 | 
			
		||||
					}, () => {
 | 
			
		||||
						browser.tabs.sendMessage(sender.tab.id, [request, false]);
 | 
			
		||||
					});
 | 
			
		||||
				}
 | 
			
		||||
			}, () => {});
 | 
			
		||||
		}
 | 
			
		||||
	});
 | 
			
		||||
}, (e) => {
 | 
			
		||||
	console.log(e);
 | 
			
		||||
});
 | 
			
		||||
| 
						 | 
				
			
			@ -1,5 +1,5 @@
 | 
			
		|||
if (document.body) {
 | 
			
		||||
	if (!['searxes.danwin1210.me', 'searxes.nmqnkngye4ct7bgss4bmv5ca3wpa55yugvxen5kz2bbq67lwy6ps54yd.onion', 'searxes.cyb'].includes(location.hostname)) {
 | 
			
		||||
	if (!['searxes.danwin1210.me', 'searxes.nmqnkngye4ct7bgss4bmv5ca3wpa55yugvxen5kz2bbq67lwy6ps54yd.onion', 'searxes.cyb', 'addons.mozilla.org'].includes(location.hostname)) {
 | 
			
		||||
		let cs = (function () {
 | 
			
		||||
			let s = document.createElement('style');
 | 
			
		||||
			document.head.appendChild(s);
 | 
			
		||||
| 
						 | 
				
			
			@ -7,12 +7,14 @@ if (document.body) {
 | 
			
		|||
		})();
 | 
			
		||||
		if (cs) {
 | 
			
		||||
			cs.insertRule("a[data-mitm]{text-decoration-line:line-through !important;text-decoration-color:red !important;text-decoration-style:double !important}", 0);
 | 
			
		||||
			cs.insertRule("a[data-mitm]::after{content:'[MITM!]';font-weight:bold}", 1);
 | 
			
		||||
			cs.insertRule("a[data-mitm]::before{content:'[MITM!]';font-weight:bold !important;color:red !important}", 1);
 | 
			
		||||
			cs.insertRule("a[data-mitm]:hover::before{content:'[Privacy Risk!!]'}", 2);
 | 
			
		||||
			cs.insertRule("a[data-mitm]:hover{color:red !important}", 3);
 | 
			
		||||
		}
 | 
			
		||||
		let asked = [location.hostname, 'searxes.danwin1210.me', 'searxes.nmqnkngye4ct7bgss4bmv5ca3wpa55yugvxen5kz2bbq67lwy6ps54yd.onion', 'searxes.cyb'];
 | 
			
		||||
		let asked = ['searxes.danwin1210.me', 'searxes.nmqnkngye4ct7bgss4bmv5ca3wpa55yugvxen5kz2bbq67lwy6ps54yd.onion', 'searxes.cyb'];
 | 
			
		||||
		document.querySelectorAll("a[href^='http://']:not([data-mitm]),a[href^='https://']:not([data-mitm]),a[href^='//']:not([data-mitm])").forEach(a => {
 | 
			
		||||
			let aF = (new URL(a.href)).hostname;
 | 
			
		||||
			if (!/^(.*)\.(onion|i2p|invalid|test|local|localhost|([0-9]{1,3}))$/.test(aF) && !asked.includes(aF)) {
 | 
			
		||||
			if (!/^(.*)\.(onion|i2p|invalid|test|local|localhost|([0-9]{1,3})|bbs|chan|cyb|dyn|geek|gopher|indy|libre|neo|null|o|oss|oz|parody|pirate|bit|lib|coin|emc|bazar|fur)$/.test(aF) && !asked.includes(aF)) {
 | 
			
		||||
				asked.push(aF);
 | 
			
		||||
				browser.runtime.sendMessage(aF);
 | 
			
		||||
			}
 | 
			
		||||
| 
						 | 
				
			
			@ -22,7 +24,7 @@ if (document.body) {
 | 
			
		|||
				if (request[1]) {
 | 
			
		||||
					document.querySelectorAll("a[href^='http://" + request[0] + "/']:not([data-mitm]),a[href^='https://" + request[0] + "/']:not([data-mitm]),a[href^='//" + request[0] + "/']:not([data-mitm])").forEach(a => {
 | 
			
		||||
						a.dataset.mitm = 1;
 | 
			
		||||
						a.title = 'MITM!';
 | 
			
		||||
						a.title = 'DANGER! DANGER! MITM!';
 | 
			
		||||
					});
 | 
			
		||||
				}
 | 
			
		||||
			}
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
| 
						 | 
				
			
			@ -2,9 +2,13 @@
 | 
			
		|||
   "manifest_version": 2,
 | 
			
		||||
   "name": "Are links vulnerable to MITM attack?",
 | 
			
		||||
   "description": "Scan FQDN using Searxes' API",
 | 
			
		||||
   "version": "1.0.2",
 | 
			
		||||
   "version": "1.0.3",
 | 
			
		||||
   "homepage_url": "https://notabug.org/themusicgod1/cloudflare-tor/src/master/ismitmlink",
 | 
			
		||||
   "author": "Maslin Bossé",
 | 
			
		||||
   "permissions": [],
 | 
			
		||||
   "permissions": [
 | 
			
		||||
      "storage",
 | 
			
		||||
      "unlimitedStorage"
 | 
			
		||||
   ],
 | 
			
		||||
   "icons": {
 | 
			
		||||
      "32": "icons/32.png"
 | 
			
		||||
   },
 | 
			
		||||
| 
						 | 
				
			
			
 | 
			
		|||
		Loading…
	
	Add table
		
		Reference in a new issue