#!/usr/bin/env python3
# ⚠️ BEZPEČNÝ SKRIPT: LEN SŤAHUJE, DEŠIFRUJE A VYPISUJE. NESPÚŠŤA PAYLOAD.
# Spúšťaj výhradne offline alebo v izolovanej VM.
import sys
import subprocess
import re
def install_deps( ) :
"""Automaticky nainštaluje requests a cryptography ak chýbajú"""
try :
import requests
from cryptography.fernet import Fernet
return requests, Fernet
except ImportError :
print ( "⚠️ Inštalujem chýbajúce knižnice..." )
subprocess .check_call ( [ sys .executable , "-m" , "pip" , "install" , "requests" , "cryptography" ] ,
stdout= subprocess .DEVNULL , stderr= subprocess .DEVNULL )
import requests
from cryptography.fernet import Fernet
return requests, Fernet
def main( ) :
requests, Fernet = install_deps( )
url = 'https://m...content-available-to-author-only...k.cy/paste?userid=1256'
# Kľúč tretej vrstvy (z tvojho predchádzajúceho výstupu)
key = b'-VP7iDwmyQYqeWCYAYyWnze1_TQ6bG-dusbwvSSvMk0='
print ( f"🌐 Pripájam sa k: {url}" )
try :
# 1. Stiahnutie obsahu a odstránenie <pre> tagov
response = requests.get ( url, timeout= 15 )
response.raise_for_status ( )
cleaned_content = response.text .replace ( '<pre>' , '' ) .replace ( '</pre>' , '' )
except Exception as e:
print ( f"❌ Chyba pri sťahovaní: {e}" )
return
# 2. Extrahovanie Fernet payloadu pomocou regulárneho výrazu
# Hľadáme reťazec začínajúci 'gAAAAAB' medzi b' a '
match = re .search ( r"b'(gAAAAAB[^\' ]*)'" , cleaned_content, re .DOTALL )
if not match:
print ( "❌ Nenašiel som zašifrovaný Fernet payload v stiahnutom kóde." )
return
# Vyčistenie prípadných nových riadkov/medzier zo stiahnutého textu
encrypted_raw = match.group ( 1 ) .replace ( '\n ' , '' ) .replace ( '\r ' , '' ) .replace ( ' ' , '' )
encrypted_bytes = encrypted_raw.encode ( 'utf-8' )
print ( "🔓 Dešifrujem finálnu vrstvu..." )
try :
# 3. Dešifrovanie
cipher = Fernet( key)
decrypted_code = cipher.decrypt ( encrypted_bytes) .decode ( 'utf-8' , errors= 'replace' )
except Exception as e:
print ( f"❌ Chyba pri dešifrovaní: {e}" )
print ( "Skontroluj, či je URL dostupná a či sa payload nezmenil." )
return
# 4. Bezpečný výpis
print ( "\n " + "=" *70 )
print ( "✅ FINÁLNY DEŠIFROVANÝ PAYLOAD:" )
print ( "=" *70 )
print ( decrypted_code)
print ( "=" *70 )
print ( "⚠️ Kód bol IBA VYPÍSANÝ. Nebol nijako spustený ani vykonaný." )
if __name__ == "__main__" :
main( )
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