Free Internet Solution
7.01K subscribers
130 photos
6 videos
40 files
53 links
ใ€ฝ๏ธ๐ŸŒ The International Channel that gives Free Internet for all countries using the protocols of UDP, HTTP, SSH, SSL, WS, DNSTT, DoH, DoT and DNS2TCP
Download Telegram
Forwarded from ASH Apps OFFICIAL (ASH)
๐ŸŸข ASH Tunnel :
All the unworking DNSTT servers are now replaced with FastDNS, more informations in the arrow described in the screenshot

+ New server : ๐Ÿ‡ฉ๐Ÿ‡ช Germany 13

@ASHAppsOFFICIAL
๐Ÿ‘1
Forwarded from โคอŸอŸอž๐๐‹๐”๐„ ๐Œ๐Ž๐ƒ๐™
๐ŸŸข ASH Tunnel :
VPS installer :
Intoducing the new update of ASH HTTP proxy that exists in our official installer script .
It is now replaced from HTTP protocol only, to HTTP + WS that are working in the same time and the same ports, and as ar result, installing separated WS protocol option has been removed.

How to switch between both of those protocols when I need one of them ?
- It's so easy, if you want to use WS Protocol, declare 'Upgrade: websocket' in your own payload. If you want to use HTTP protocol, don't declare it in your payload

New payload header : [sameresponse]

What's the benefit of this new feature ?
- it gets the response headers of your host using the same injected payload and bring it back for your client

How to use it ?
- you should declare it exactly in the right side of the "Host" header,
Example :
Before :
GET /cdn-cgi/trace HTTP/1.1[crlf]Host: www.google.com[crlf][crlf]
After :
GET /cdn-cgi/trace HTTP/1.1[crlf][sameresponse]Host: www.google.com[crlf][crlf]

โš  Note : if [sameresponse] is declared but 'host' header doesn't exist, the [sameresponse] feature will be skipped and the default response 200 OK will be given

Examples below soon :
โค1
Forwarded from โคอŸอŸอž๐๐‹๐”๐„ ๐Œ๐Ž๐ƒ๐™
๐ŸŸข ASH Tunnel :
VPS installer :
ู†ู‚ุฏู… ู„ูƒู… ุงู„ุชุญุฏูŠุซ ุงู„ุฌุฏูŠุฏ ุงู„ุฎุงุต ุจุจุฑูˆูƒุณูŠ ASH HTTP ุงู„ู…ูˆุฌูˆุฏ ููŠ ุณูƒุฑูŠุจุช ุงู„installer ุงู„ุฑุณู…ูŠ ุงู„ุฎุงุต ุจู†ุง.
ู„ู‚ุฏ ุชู… ุชุบูŠูŠุฑู‡ ู…ู† ุจุฑูˆุชูˆูƒู„ HTTP ุฅู„ู‰ HTTP + WS ุญูŠุซ ูŠุนู…ู„ุงู† ููŠ ู†ูุณ ุงู„ูˆู‚ุช ูˆู†ูุณ ุงู„ู…ู†ุงูุฐุŒ ูˆูƒู†ุชูŠุฌุฉุŒ ุชู… ู†ุฒุน ุจุฑูˆุชูˆูƒูˆู„ WS ุงู„ุฐูŠ ูŠุนู…ู„ ุจุดูƒู„ ู…ู†ูุตู„

ูƒูŠู ูŠู…ูƒู†ู†ูŠ ุงู„ุชุบูŠูŠุฑ ุจูŠู† ูƒู„ุง ู…ู† ู‡ุฐูŠู† ุงู„ุจุฑูˆุชูˆูƒูˆู„ูŠู† ุนู†ุฏู…ุง ุฃุฑูŠุฏ ูˆุงุญุฏุง ููŠู‡ู… ุŸ
- ุงู„ุฃู…ุฑ ุณู‡ู„ุŒ ุฅุฐุง ูƒู†ุช ุชุฑูŠุฏ ุงุณุชุนู…ุงู„ ุจุฑูˆุชูˆูƒูˆู„ ุงู„WSุŒ ุฃุนู„ู† ุนู† 'Upgrade: websocket' ุฏุงุฎู„ ุงู„ุจุงูŠู„ูˆุฏ ุงู„ุฎุงุต ุจูƒุŒ ุฅุฐุง ูƒู†ุช ุชุฑูŠุฏ ุงุณุชุนู…ุงู„ ุจุฑูˆุชูˆูƒูˆู„ ุงู„HTTPุŒ ูู„ุง ุชุนู„ู† ุนู†ู‡ุง ููŠ ุงู„ุจุงูŠู„ูˆุฏ ุงู„ุฎุงุต ุจูƒ

ุจุงูŠู„ูˆุฏ header ุฌุฏูŠุฏ : [sameresponse]
ู…ุง ูุงุฆุฏุฉ ู‡ุฐู‡ ุงู„ู…ูŠุฒุฉ ุงู„ุฌุฏูŠุฏุฉ ุŸ
- ุชู‚ูˆู… ุจุงู„ุญุตูˆู„ ุนู„ู‰ ุงู„ุฅุณุชุฌุงุจุฉ ุงู„ุฎุงุตุฉ ุจุงู„ู‡ูˆุณุช ุงู„ู…ูˆุฌูˆุฏ ุฏุงุฎู„ ุงู„ุจุงูŠู„ูˆุฏ ุงู„ุฎุงุต ูˆุชู‚ูˆู… ุจุฅุฑุฌุงุนู‡ ู„ู„client ุงู„ุฎุงุต ุจูƒ

ูƒูŠู ุฃุณุชุนู…ู„ู‡ุง ุŸ
- ูŠุฌุจ ุฃู† ุชุนู„ู†ู‡ุง ุชู…ุงู…ุง ููŠ ุงู„ุฌุงู†ุจ ุงู„ุฃูŠุณุฑ ู…ู† ุงู„header ุงู„ุฎุงุต ุจุงู„'Host'
ู…ุซุงู„ :
ู‚ุจู„ :
GET /cdn-cgi/trace HTTP/1.1[crlf]Host: www.google.com[crlf][crlf]
ุจุนุฏ :
GET /cdn-cgi/trace HTTP/1.1[crlf][sameresponse]Host: www.google.com[crlf][crlf]

โš  ู…ู„ุงุญุธุฉ :
ุฅุฐุง ุชู… ุงู„ุฅุนู„ุงู† ุนู† [sameresponse] ู„ูƒู† ุงู„header ุงู„ุฎุงุต ุจุงู„'host' ู„ูŠุณ ู…ูˆุฌูˆุฏุงุŒ ูุณูŠุชู… ุชุฌุงูˆุฒ ู…ูŠุฒุฉ ุงู„[sameresponse] ูˆุณุชุนุทู‰ ุงู„ุฅุฌุงุจุฉ ุงู„ุฅูุชุฑุงุถูŠุฉ 200 OK
Forwarded from โคอŸอŸอž๐๐‹๐”๐„ ๐Œ๐Ž๐ƒ๐™
Example 1 :
Both HTTP and WS have the same port, and both are working properly, the trigger between both of them is 'Upgrade: websocket'
Forwarded from โคอŸอŸอž๐๐‹๐”๐„ ๐Œ๐Ž๐ƒ๐™
Example 2 : [sameresponse] feature
โค2
Guess who's back
@by ysn๐Ÿ”ฅ

#ZeroTrace
โค20๐Ÿ‘12๐ŸŽ‰11๐Ÿ”ฅ9
๐Ÿšจ๐Ÿšจ๐Ÿšจ๐Ÿšจ SOMETHING IS COMING

STAY TUNED๐Ÿ˜‰
#ZeroTrace


YOUR REACTSโฌ‡๏ธโฌ‡๏ธ
โค13๐ŸŽ‰6๐Ÿ’ฏ3๐Ÿ†1
๐Ÿ“œ This isnโ€™t a joke. xdtools messed with the wrong person.


Some of you are asking: "Whatโ€™s going on?"

Let me break it down real simple:

A certain app called xdtools thought it was invincible.

Their dev leaked sensitive configs from other apps just to look cool.
He mocked people. Acted like nobody could touch him.

I gave him a chance to stop.
I offered peace.

He laughed.

So I accessed xdtools from the inside.
I now have:
โœ… Full source code
โœ… All project settings
โœ… His VIP system logic
โœ… API keys
โœ… Build files
โœ… Databases

He panicked and shut the app down.
Tried to play it off like โ€œheโ€™s done with it.โ€ Cute.

No โ€” heโ€™s just done. Period.

Welcome to the show๐Ÿ‘ฝโœ…
#ZTvsXdtools #KnowYourPlace #xdexposed
โค5๐Ÿ”ฅ2๐Ÿค2
ARE YOU READYYY...โš ๏ธโš ๏ธ

#ZeroTrace
๐Ÿค”1
xdtools.txt
1.6 MB
You kept talking like your project was some high-security fortress.

Turns outโ€ฆ it was more like a broken tent.

Today, Iโ€™m dropping the first piece of proof.
Nothing too damaging just enough to make you sweat.

โœ… Internal file structure
โœ… Partial project logic
โœ… Real evidence of access
โœ… Still not even 10% of what I have

I wonโ€™t drop everything at once.

Why?

Because I want you and everyone watching to understand just how fragile your entire build was.

More coming.
Only louder.
#ZeroTrace
โœ2โค1
Free Internet Solution
xdtools.txt
@m_na891
Watch closely. This is just the setupโ˜ฃ๏ธโ˜ฃ๏ธโ˜ฃ๏ธ

#ZeroTrace