init testing

This commit is contained in:
Cynthia Foxwell 2018-05-19 21:51:19 -06:00
parent 5ca406fa21
commit 37d0cb7f80
10 changed files with 2207 additions and 0 deletions

201
app/index.html Normal file
View File

@ -0,0 +1,201 @@
<!--
EndPwn3 Stage 0 Payload
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
https://github.com/endpwn/
-->
<html>
<head>
<style>
@font-face {
font-family: 'IBMVGA8';
src: url('https://cynfoxwell.cf/fonts/ibm_vga8.eot');
src: url('https://cynfoxwell.cf/fonts/ibm_vga8.eot?#iefix') format('embedded-opentype'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.woff2') format('woff2'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.woff') format('woff'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.ttf') format('truetype');
font-weight: normal;
font-style: normal;
}
* {
margin: 0;
padding: 0;
}
body {
font-family: 'IBMVGA8' !important;
text-align: center;
background-color: #1a1d23;
color: #ffffff
}
div {
position: absolute;
top: 50%;
left: 50%;
transform: translate(-50%, -50%);
background: linear-gradient(to bottom right, #c0ff80, #c080ff);
-webkit-background-clip: text;
-webkit-text-fill-color: transparent;
font-size: 96px;
}
span {
position: absolute;
top: 0%;
left: 50%;
transform: translate(-50%, 0%);
color: #f00;
font-size: 16px;
}
canvas {
display: block;
position: absolute;
z-index: -1;
}
</style>
<script>
// wait until DOM is ready so that error messages can display properly
window.onload = () => {
setTimeout(async () => {
// dont try doing anything if running in a browser
if (navigator.userAgent.indexOf('discord') == -1) return;
var approot = location.href.split('/app/')[0];
try {
// fix for recent canary update
if (window.require === undefined) {
window.electron = DiscordNative.nativeModules.requireModule("discord_/../electron").remote;
window.require = electron.require;
} else {
window.electron = require('electron').remote;
}
window.fs = require("original-fs");
window.Buffer = require("buffer").Buffer;
var data = electron.app.getPath('userData');
var branch = require('path').basename(data).substr(7);
function load() {
electron.BrowserWindow.addExtension(data + '/crxpwn');
electron.getCurrentWindow().loadURL('https://' + (branch && branch != 'development' ? branch + '.' : '') + 'discordapp.com/channels/@me');
}
if (window.betterDiscordIPC) {
alert('EndPwn3 is not compatible with BetterDiscord\n\nPress OK to return to Discord', 'EndPwn3: Framework Conflict');
electron.getCurrentWindow().loadURL('https://' + (branch && branch != 'development' ? branch + '.' : '') + 'discordapp.com/channels/@me');
return;
}
// temporary
if (branch != 'canary') {
alert('EndPwn3.1 Staging uses crxpwn which only works on Canary at the moment', 'Sorry');
electron.getCurrentWindow().loadURL('https://' + (branch && branch != 'development' ? branch + '.' : '') + 'discordapp.com/channels/@me');
return;
}
// asarpwn (as a removal tool)
function asarinject(sig, inj) {
var dirlisting = fs.readdirSync(data);
var latestver = dirlisting.filter(d => d.indexOf("0.0.") > -1);
if (sig.length != inj.length) {
throw 'signature and injection not same size'
}
var bdata = new Buffer(fs.readFileSync(`${data}/${latestver[latestver.length - 1]}/modules/discord_desktop_core/core.asar`));
var index = bdata.indexOf(sig);
if (index == -1) {
return 0;
}
bdata.write(inj, index);
fs.writeFileSync(`${data}/${latestver[latestver.length - 1]}/modules/discord_desktop_core/core.asar`, bdata);
return 1;
}
// install endpwn
var o = fs.existsSync(data + '/settings.json') ? JSON.parse(fs.readFileSync(data + '/settings.json', 'utf8')) : {}; // load settings.json
o['WEBAPP_ENDPOINT'] = location.href.split('?')[0] + '?'; // aim the app at stage 0
o['WEBAPP_PATH'] = undefined; // clear old WEBAPP_PATH
fs.writeFileSync(data + '/settings.json', JSON.stringify(o, null, 2)); // commit changes to disk
try {
if (window.__crispr_load_attempted)
// reverse asarpwn3
if (asarinject(
"var electron=require('electron');var d=electron.remote.app.getPath('userData')+'/crispr.js';if(require('fs').existsSync(d))require(d).go();//",
"// App preload script, used to provide a replacement native API now that\n// we turned off node integration.\nvar electron = require('electron'"
)) {
electron.app.relaunch();
electron.app.exit();
}
} catch (ex) {
alert(ex, 'asarpwn3');
}
if (!fs.existsSync(data + '/crxpwn')) {
fs.mkdirSync(data + '/crxpwn');
fs.writeFileSync(data + '/crxpwn/manifest.json', '{"manifest_version":2,"name":"crxpwn","description":"asarpwn-less preload scripts for the masses ;)","version":"1.0","content_scripts":[{"js":["payload.js"],"matches":["*://*/*"],"run_at":"document_start","all_frames":true}]}');
}
if (!fs.existsSync(data + '/plugins')) fs.mkdirSync(data + '/plugins');
if (!fs.existsSync(data + '/styles')) fs.mkdirSync(data + '/styles');
// dont update EPAPI/CRISPR if DONTUPDATE exists
if (!fs.existsSync(data + '/DONTUPDATE')) {
// get files
fs.writeFileSync(data + '/crxpwn/payload.js', await (await fetch(approot + '/crxpwn.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/epapi.js', await (await fetch('https://endpwn.github.io/epapi/epapi.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/crispr.js', await (await fetch('https://endpwn.github.io/crispr/crispr.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/plugins/system.js', await (await fetch(approot + '/plugin/system.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/plugins/customizer.js', await (await fetch(approot + '/plugin/customizer.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/plugins/settings.js', await (await fetch(approot + '/plugin/settings.js?_=' + Date.now())).text());
fs.writeFileSync(data + '/styles/system.css', await (await fetch(approot + '/plugin/system.css?_=' + Date.now())).text());
setTimeout(load, 1000);
}
else {
setTimeout(load, 1000);
}
}
catch (e) {
console.error(e);
document.querySelector('div').parentNode.innerHTML += '<span>Inititialization failure. Check the console for details.</span>';
}
}, 500);
};
</script>
</head>
<body>
<div>C&lambda;nergy</div>
</body>
</html>

263
crispr/crispr.js Normal file
View File

@ -0,0 +1,263 @@
/*
EndPwn CRISPR
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
function evaluate(str, exportsR) {
var exports = {};
var ret = eval(str);
if (exportsR) Object.assign(exportsR, exports);
return ret;
}
(() => {
// log function
function __crprint(str) {
console.log(`%c[CRISPR]%c ` + str, 'font-weight:bold;color:#c8f', '');
}
function __crwarn(str) {
console.warn(`%c[CRISPR]%c ` + str, 'font-weight:bold;color:#c8f', '');
}
exports.go = (() => {
window.__crispr_load_attempted = true;
if (location.hostname.indexOf('discordapp') == -1 && location.hostname.indexOf('dr1ft.xyz') == -1) return;
try {
__crprint('starting up...');
var _localStorage = window.localStorage;
window.crispr = {
version: {
major: 1,
minor: 2,
revision: 8,
toString: function () {
return `v${this.major}.${this.minor}.${this.revision}`;
}
},
research: {
webpackJsonpPushes: [],
webpackJsonpTransformations: []
},
data: {
},
functions: {
patch: mod => {
// make sure it's an array before trying to process it
if (Array.isArray(mod)) {
// iterate over every module
__crprint(`processing ${mod.length} modules...`);
for (i in mod) {
// iterate over the replacement dictionary
snippets.forEach(pair => {
// convert the module constructor into a string
var orig = mod[i].toString();
// get the replacement snippet
var signature = pair.signature;
// check if it's an old shitty regex replacement
signature = typeof signature == 'string' ? signature.startsWith('/') && signature.endsWith('/') ? new RegExp(signature.substr(1, signature.length - 2)) : signature : signature;
// if the constructor contains our signature, patch it
if (typeof signature == 'string' ? orig.indexOf(signature) != -1 : orig.match(signature)) {
// replace the function with our new one
__crprint(`patching module ${i}... (${signature})`);
mod[i] = eval('(' + orig.replace(signature, pair.payload) + ')');
}
});
}
}
},
pushHookOld: (x, mod, main) => {
// disable safemode keystroke listener
document.removeEventListener('keydown', goSafe);
// check if safemode
if (!_localStorage['safemode'])
crispr.functions.patch(mod);
// call webpack proper with our modified modules
return crispr.data.webpackPush(x, mod, main);
},
pushHookNew: (x,mod,main) => {
// disable safemode keystroke listener
document.removeEventListener('keydown', goSafe);
// check if safemode
if (!_localStorage['safemode'])
crispr.functions.patch(mod);
// call webpack proper with our modified modules
return x,mod,main;
}
},
};
// safemode stuff
__crprint('press left shift to start up in safemode');
function goSafe(e) {
if (e.keyCode == 16)
_localStorage['safemode'] = 1;
__crwarn('ok, starting up in safe mode');
document.removeEventListener('keydown', goSafe);
}
document.addEventListener('keydown', goSafe);
document.addEventListener('ep-ready', () => document.removeEventListener('keydown', goSafe)); // crispr expects epapi to reset safemode and fire ep-ready
// with crxpwn, it's no longer safe to assume we have access to require()
var electron;
if (window.DiscordNative !== undefined) {
electron = DiscordNative.nativeModules.requireModule("discord_/../electron");
window.require = electron.remote.require;
}
else {
electron = require('electron');
}
// crispr runs far before epapi is ready, so we need to define these for ourself
const fs = require('original-fs');
const data = electron.remote.app.getPath('userData');
function krequire(p) {
var exports = {};
eval(fs.readFileSync(data + '/plugins/' + p + (p.endsWith('.js') ? '' : '.js'), 'utf8').toString());
return exports;
}
// replacement dictionary
var snippets = [
// TODO: move these the fuck out of this file after endpwn3.1
{ signature: '#([0-9]{4})', payload: '#(.{1,4})' },
{ signature: 'return t.hasFlag(H.UserFlags.STAFF)', payload: 'return t.hasFlag(4096)&&r.push({tooltip:"EndPwn Developer",onClick:function(){return window.open("https://endpwn.github.io/","_blank")},class:"endpwn"}),t.hasFlag(H.UserFlags.STAFF)' }
];
// plugin iterator, taken from epapi
if (fs.existsSync(data + '/plugins')) {
fs.readdirSync(data + '/plugins').forEach(x => {
if (x.endsWith('.js')) {
try {
var plugin = krequire(x);
if (plugin.preload !== undefined) {
// plugin has a preload function
__crprint('executing /plugins/' + x);
plugin.preload();
}
if (plugin.replacements !== undefined) {
// add the plugin's replacements to the dictionary
__crprint('adding replacements from /plugins/' + x);
__crwarn('exports.replacements is deprecated, please use exports.manifest.replacements');
Object.keys(plugin.replacements).map(key => { return { signature: key, payload: plugin.replacements[key] } }).forEach(x => snippets.push(x));
}
if (plugin.manifest !== undefined && plugin.manifest.replacements !== undefined) {
// add the plugin's replacements to the dictionary
__crprint('adding replacements from /plugins/' + x);
plugin.manifest.replacements.forEach(x => snippets.push(x));
}
} catch (e) {
console.warn('/plugins/' + x + ' contains errors\n\n', e);
}
}
});
}
// hook webpackJsonp so that we can play with the constructors
__crprint('hooking webpackJsonp...');
Object.defineProperty(window, "webpackJsonp", {
// return crispr's function instead of webpack proper
get: () => window.crispr.hook,
// setup replacement when discord tries to define webpack
set: webpack => {
if (window.webpackJsonp && window.webpackJsonp.patched) return;
const push_original = webpack.push;
//__crprint('something is trying to define webpackJsonp...');
window.crispr.webpackJsonp = webpack;
if (typeof webpack == 'function') {
window.crispr.data.webpackPush = webpack;
window.crispr.hook = window.crispr.functions.pushHookOld;
} else {
const newPush = function(e,t,o){
const modules = t || e[1];
const main = o ? o : e[2];
const _ = t ? e : e[0];
const {x,patched,z} = window.crispr.functions.pushHookNew(_,modules,main);
const args = [_,patched,main];
push_original.apply(webpack, [args])
}
webpack.push = newPush;
window.crispr.hook = webpack;
webpack.patched = true;
}
}
});
__crprint('ready!');
} catch (ex) {
// something bad happened -- if we dont catch this exception it will break discord!!!
console.error('CRISPR init failure!\n\n', ex);
}
});
})();

74
crxpwn.js Normal file
View File

@ -0,0 +1,74 @@
/*
EndPwn3 Stage 2 Payload (crxpwn)
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
function evaluate(str, exportsR) {
var exports = {};
var ret = eval(str);
if (exportsR) Object.assign(exportsR, exports);
return ret;
}
(() => {
function __crxprint(str) {
console.log(`%c[crxpwn]%c ` + str, 'font-weight:bold;color:#c8f', '');
}
if (location.hostname.indexOf('discordapp') == -1) return;
__crxprint('extension loaded successfully, loading CRISPR and EPAPI...');
window.BetterDiscord = 'this is a dummy value to trip hasSuspiciousCode()';
// use the discord native api to require electron and get electron.remote
var electron = DiscordNative.nativeModules.requireModule('discord_/../electron').remote;
var fs = electron.require('original-fs');
// get the data path (where epapi.js should be)
var data = electron.app.getPath('userData').replace(/\\\\/g, "/") + '/';
// shakily reimplemented of require() intended for loading plugins and EPAPI itself
function krequire(p) {
var exports = {};
evaluate(fs.readFileSync(data + p + (p.endsWith('.js') ? '' : '.js'), 'utf8').toString(), exports);
return exports;
}
// load CRISPR and EPAPI
var crispr = krequire('crispr.js');
var epapi = krequire('epapi.js');
var properties = {
name: 'EndPwn3',
version: {
major: 3,
minor: 1,
toString: function () {
return `v${this.major}.${this.minor}`;
}
},
method: 'crxpwn',
brand: true
};
// call their entrypoints
crispr.go(properties);
electron.getCurrentWindow().webContents.on('dom-ready', () => epapi.go(properties));
})();

933
epapi/epapi.js Normal file
View File

@ -0,0 +1,933 @@
/*
EndPwn "API"
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
function evaluate(str, exportsR) {
var exports = {};
var ret = eval(str);
if (exportsR) Object.assign(exportsR, exports);
return ret;
}
(() => {
var internal = {
print: function (t) {
console.log(`%c[EPAPI]%c ${t}`, 'font-weight:bold;color:#c8f', '');
},
warn: function (t, e) {
if (typeof (e) == 'undefined') e = ''; else e = ':\n\n' + e;
console.warn(`%c[EPAPI]%c ${t}`, 'font-weight:bold;color:#c8f', '', e);
},
error: function (e, t) {
if (typeof (t) == 'undefined') t = 'uncaught exception';
console.error(`%c[EPAPI]%c ${t}:\n\n`, 'font-weight:bold;color:#c8f', '', e);
},
alert: function (b, t) {
if (typeof (t) == 'undefined') t = 'EPAPI'; else t = 'EPAPI: ' + t;
try {
wc.findFunc('e.onConfirmSecondary')[1].exports.show({ title: t, body: b });
} catch (e2) {
internal.error(e2, "Error occurred while attempting to pop the standard dialog box, falling back to alert()");
alert(b, t);
}
},
crashed: 0,
crash: function (e) {
internal.error(e, 'Fatal error!');
if (!internal.crashed) {
internal.crashed = 1;
if (internal.brand) {
internal.setSigmaColor('#f00');
}
internal.alert('A fatal error occurred in EPAPI.\n\nThis usually means there is a bug in EPAPI or your bootstrap. It can also mean that Discord updated, breaking something important.\n\nCheck the console for details.\n\nIf you don\'t know what this means, contact your bootstrap maintainer.', 'Fatal error!');
}
},
setwordmark: function (html) {
try {
return document.querySelector('[class*="wordmark"]').innerHTML = html;
}
catch (e) { }
},
setSigmaColor: function (color) {
setTimeout(() => internal.setwordmark(`<svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 16 16"><path fill="${color}" d="M0,0L13,0L13,2L3,2L8,7.5L3,13L13,13L13,15L0,15L0,13L5,7.5L0,2L0,0Z"/></svg>`), 2000);
},
// document-level events (internal)
events: {
// dispatched whenever Discord's internal event system dispatches an event
discordNativeEvent: function (e) {
return new CustomEvent('ep-native', { detail: e });
},
// dispatched whenever EPAPI is done initializing and loading plugins
onReady: function () {
return new Event('ep-ready');
},
// dispatched during early init, to signal that at least the global namespace is ready
// intended for use by bootstraps
onPrepared: function () {
return new Event('ep-prepared');
},
// dispatched whenever the user changes channel/guild in the ui
onChannelChange: function (e) {
return new CustomEvent('ep-onchannelchange', { detail: e.detail });
},
// dispatched whenever any message is received by the client
onMessage: function (e) {
return new CustomEvent('ep-onmessage', { detail: e.detail });
},
// dispatched whenever a message is received in the channel that the user is currently viewing
onChannelMessage: function (e) {
return new CustomEvent('ep-onchannelmessage', { detail: e.detail });
}
},
// stuff asarpwn's i.js and main.js used to handle
prepare: async function () {
internal.print('loading RapidDOM...');
evaluate(await (await fetch('https://endpwn.github.io/rapiddom/rapiddom.js?_=' + Date.now())).text());
// undefine config and settings if running in lite mode and dont deal with require()
if (internal.lite) {
exports.config = undefined;
}
else {
// mutant hybrid require() for maximum compatibility, always defined now because some bootstraps have bad implementations
internal.print('defining require...');
//if (typeof (require) == "undefined") {
var r = DiscordNative.nativeModules.requireModule("discord_/../electron").remote.require;
window.require = m => {
try {
return DiscordNative.nativeModules.requireModule("discord_/../" + m);
}
catch (e) {
return r(m);
}
};
//}
// here we import and define some stuff that usually gets defined by the bootstrap, just in case
internal.print('requiring necessary modules...');
window.electron = require('electron').remote;
window.app = electron.app;
window.fs = require("original-fs");
// kinclude executes a file directly in the context of the page
window.kinclude = function (p) {
return evaluate(fs.readFileSync(p, 'utf8').toString());
}
// krequire is a reimplementation of require(), only intended for loading plugins
window.krequire = function (p) {
var exports = {};
evaluate(fs.readFileSync($api.data + '/plugins/' + p + (p.endsWith('.js') ? '' : '.js'), 'utf8').toString(), exports);
return exports;
}
}
window.kparse = function (p) {
var exports = {};
evaluate(p, exports);
return exports;
}
// this part sets up webcrack, which is a very important part of EPAPI -- credit to bootsy
internal.print('initializing webcrack...');
webpackJsonp([1e3], { webcrack_ver01_xyzzy: function (n, b, d) { mArr = d.m, mCac = d.c, mCar = [], Object.keys(mCac).forEach(function (n) { mCar[n] = mCac[n] }), findFunc = function (n) { results = []; if ("string" == typeof n) mArr.forEach(function (r, t) { -1 !== r.toString().indexOf(n) && results.push(mCac[t]) }); else { if ("function" != typeof n) throw new TypeError("findFunc can only find via string and function, " + typeof n + " was passed"); mArr.forEach(function (r, e) { n(r) && results.push(mCac[e]) }) } return results }, findCache = function (n) { if (results = [], "function" == typeof n) mCar.forEach(function (r, t) { n(r) && results.push(r) }); else { if ("string" != typeof n) throw new TypeError("findCache can only find via function or string, " + typeof n + " was passed"); mCar.forEach(function (r, t) { if ("object" == typeof r.exports) for (p in r.exports) if (p == n && results.push(r), "default" == p && "object" == typeof r.exports["default"]) for (p in r.exports["default"]) p == n && results.push(r) }) } return results }, window.wc = { get: d, modArr: mArr, modCache: mCac, modCArr: mCar, findFunc: findFunc, findCache: findCache } } }); webpackJsonp([1e3], "", ["webcrack_ver01_xyzzy"]);
internal.print('defining helper functions...');
// shorthand methods that are used internally and in many plugins, maintained for compatibility and convenience
window.$listen = (e, c) => {
var listener = {
name: e,
callback: function () {
try {
c.apply(null, arguments);
}
catch (e) {
internal.error(e, 'An event listener threw an exception');
}
},
unregister: function () {
document.removeEventListener(this.name, this.callback);
}
}
document.addEventListener(listener.name, listener.callback);
return listener;
};
window.$dispatch = e => document.dispatchEvent(e);
window.$purge = e => {
internal.warn('$purge() is deprecated, use HTMLElement.purge() instead');
e.innerHTML = '';
};
window.$_ = function (e, c, t, i) {
internal.warn('$_() is deprecated, use createElement() and RapidDOM instead');
var elm = document.createElement(e);
if (typeof (c) != 'undefined') {
elm.className = c;
if (typeof (t) != 'undefined') {
elm.innerText = t;
if (typeof (i) != 'undefined') {
elm.id = i;
}
}
}
return elm;
};
window.$chan = exports.ui.getCurrentChannel;
window.$guild = exports.ui.getCurrentGuild;
window.$me = exports.internal.getId;
// expose EPAPI as $api, which is what most plugins expect it to be known as
window.$api = exports;
// extension methods used in some older plugins, maintained for compatibility
String.prototype.replaceAll = function (search, replacement) { return this.split(search).join(replacement) };
Array.prototype.contains = function (s) { return this.indexOf(s) != -1 };
// derive the date of creation from a discord snowflake id
Date.fromSnowflake = (id) => new Date((id / 4194304) + 1420070400000);
},
// set everything up and load plugins
init: function () {
if ($(".guilds-wrapper .guilds") != null ? $(".guilds-wrapper .guilds").children.length > 0 : 0) {
try {
if (exports.localStorage.get('safemode')) {
internal.print('running in safe mode, aborting late-init and informing the user');
exports.localStorage.remove('safemode');
internal.setSigmaColor('#ff0');
internal.alert('EPAPI is running in safe mode. No plugins have been loaded and internal Discord data structures have been left unmodified.', 'Safe Mode');
return;
}
exports.localStorage.remove('safemode');
// actually start initializing...
internal.print('Discord ready, initializing...')
// number of broken plugins
var warning = 0;
// use the ep-native event to dispatch other events
$listen('ep-native', (e) => {
switch (e.detail.type) {
case 'MESSAGE_CREATE':
$dispatch(internal.events.onMessage(e));
break;
case 'CHANNEL_SELECT':
$dispatch(internal.events.onChannelChange(e));
break;
}
});
// ep-onchannelmessage is like ep-onmessage, except it only fires when the user is currently viewing the channel the message originates from
$listen('ep-onmessage', e => {
if (e.detail.channel_id == $chan()) {
$dispatch(internal.events.onChannelMessage(e));
}
});
// register an event with discord's internal event system
internal.print('registering Discord event handler...');
window.__logAllInternalEvents = false;
exports.internal.dispatcher.default.register(e => {
if (!internal.crashed) {
if (window.__logAllInternalEvents) {
console.log(e.type + '\n', e);
}
try {
$dispatch(internal.events.discordNativeEvent(e));
}
catch (e) {
internal.crash(e);
}
}
});
// hook the discord internal event system
// TODO: registering with the event system is no longer necessary, we should probably unify this with the above chunk of code
exports.internal.dispatcher.default.dispatch_original = exports.internal.dispatcher.default.dispatch;
exports.internal.dispatcher.default.dispatch = function (e) {
internal.hooks.filter(x => x.type == e.type).forEach(x => x.callback(e));
exports.internal.dispatcher.default.dispatch_original(e);
}
// add our avatar -- credit to block for finding this method
wc.findFunc("clyde")[0].exports.BOT_AVATARS.EndPwn = "https://cdn.discordapp.com/avatars/350987786037493773/ae0a2f95898cfd867c843c1290e2b917.png";
// dont try loading plugins in lite mode
if (internal.lite) {
}
else {
// load styles
if (fs.existsSync(exports.data + '/styles')) {
fs.readdirSync(exports.data + '/styles').forEach(x => {
internal.print('loading /styles/' + x);
if (x.endsWith('.css')) {
var style = document.createElement("style");
style.type = "text/css";
style.innerHTML = fs.readFileSync(exports.data + '/styles/' + x).toString();
document.head.appendChild(style);
}
});
}
// load plugins...
if (fs.existsSync(exports.data + '/plugins')) {
fs.readdirSync(exports.data + '/plugins').forEach(x => {
if (x.endsWith('.js')) {
try {
var plugin = krequire(x);
if (plugin.start !== undefined) {
internal.print('loading /plugins/' + x);
plugin.start();
} else {
internal.print('/plugins/' + x + ' does not export start(), ignoring...');
}
}
catch (e) {
internal.error(e, x + ' failed to initialize properly');
warning++;
}
}
});
}
// execute autoruns...
if (fs.existsSync(exports.data + '/autorun')) {
fs.readdirSync(exports.data + '/autorun').forEach(x => {
if (x.endsWith('.js')) {
try {
internal.print('executing /autorun/' + x);
kinclude(exports.data + '/autorun/' + x);
}
catch (e) {
internal.error(e, x + ' failed to execute properly');
warning++;
}
}
});
}
}
setTimeout(() => {
if (window.jQuery)
internal.crash('EndPwn is not compatible with jQuery');
}, 2000);
// display a message if any plugins failed to load
if (warning)
internal.alert(`${warning} file${warning > 1 ? 's' : ''} failed to load. Check the console for details.`, 'Plugin failure');
// print the about message to the console
if (!internal.silent)
exports.about();
// dispatch the ep-ready event, we're all done here
$dispatch(internal.events.onReady());
}
catch (ex) {
internal.crash(ex);
}
} else {
// discord isnt ready, wait a bit and try again
internal.print('Discord not ready, waiting 1 second...');
setTimeout(arguments.callee, 1000);
}
},
hooks: []
}
exports = {
// new version data
version: {
major: 5,
minor: 6,
revision: 43, // TODO: find a better way of incrementing/calculating the revision; the current way is fucking ridiculous (manually editing)
toString: function () {
return `v${this.major}.${this.minor}.${this.revision}`;
}
},
// the first ever export added to epapi, originally as a test -- kept in mainline because i havent had the heart to remove it
xyzzy: 'Nothing happened.',
// display info
// ugly code, should probably be made prettier at some point
// oh no i made it even uglier
about: function () {
if (internal.lite) {
console.log('%cΣndPwnᴸᴵᵀᴱ', 'font-size:48px;font-family:sans-serif');
console.log(`EPAPI ${this.version}\nhttps://endpwn.github.io/\nhttps://discord.gg/8k3gEeE`);
}
else
console.log(`%cCλnergy%c
${this.bootstrap.name ? this.bootstrap.name : 'unknown'}${this.bootstrap.version ? ` ${this.bootstrap.version}` : ''}${this.bootstrap.method ? ` (${this.bootstrap.method})` : ''}
EPAPI ${this.version}${window.crispr ? `, CRISPR ${window.crispr.version}` : ''}
https://endpwn.github.io/
https://discord.gg/8k3gEeE`,
'background:linear-gradient(to bottom right,#cf8,#c8f);-webkit-background-clip:text;-webkit-text-fill-color:transparent;font-size:48px;font-family:sans-serif', '');
},
// get the lite status
get lite() {
return internal.lite;
},
/*
entrypoint arguments:
bootstrap (object): bootstrap properties
keys:
name (string): name of bootstrap
version (string or object): version of bootstrap
method (string): name of stage 1 method in use
lite (bool): disables node dependence (for web browsers)
silent (bool): dont display about() after initialization
brand (bool): enables the sigma wordmark replacement
secure (bool): enables security features like permissions
all keys are optional, boolean values are assumed false if not provided
please do not call this method unless you are a bootstrap
*/
bootstrap: {
name: "Cλnergy (Cynergy2, codename lambda)",
version: "[Σv3.1.1, λv1]",
method: "lambda",
lite:false,
silent:false,
brand:false
},
go: async function (bootstrap, silent, brand, lite) {
if (location.hostname.indexOf('discordapp') == -1 && location.hostname.indexOf('dr1ft.xyz') == -1) return;
try {
internal.print('starting up...')
// figure out which calling convention is being used
switch (typeof bootstrap) {
// new bootstrap using bootstrap properties object instead of separate arguments
case 'object':
exports.bootstrap = bootstrap;
internal.lite = bootstrap.lite ? true : false;
internal.silent = bootstrap.silent ? true : false;
internal.brand = bootstrap.brand ? true : false;
break;
// older bootstrap
case 'string':
exports.bootstrap = {
name: bootstrap
};
internal.lite = lite ? true : false; // dont use node integration
internal.silent = silent ? true : false;
internal.brand = brand ? true : false;
break;
// really old bootstrap, or the bootstrap is doing something stupid we dont expect
default:
if (window._epmethod === undefined) {
exports.method = 'unknown';
} else {
exports.method = _epmethod;
}
break;
}
internal.print('detected calling convention');
// prepare the global namespace
internal.print('preparing the global namespace...');
await internal.prepare();
// dispatch ep-prepared to let the bootstrap know that the global namespace is ready
$dispatch(internal.events.onPrepared());
if (!internal.lite) {
// determine the root path where plugins and files will be found
exports.data = app.getPath('userData').replace(/\\/g, "/") + '/';
internal.print('data path ' + exports.data);
// icon by toxoid49b, tweaked by me
if (internal.brand) {
internal.setSigmaColor('#0ff');
}
}
// start trying to init
internal.print('starting init loop...');
setTimeout(internal.init, 0);
// undefine the entrypoint to avoid getting double-called
delete exports.go;
}
catch (ex) {
// something bad happened, undefine $api and display a message
internal.crash(ex);
}
},
// methods for committing data to settings.json
settings: {
// get a value in the settings.json object
get: function (k) {
if (internal.lite)
internal.warn('Something tried retrieving data from settings.json, but we are running in lite mode! Returning undefined...');
else
return JSON.parse(fs.readFileSync(exports.data + '/settings.json', 'utf8'))[k];
},
// set a value in the settings.json object
set: function (k, v) {
if (internal.lite) {
internal.warn('Something tried putting data into settings.json, but we are running in lite mode! Doing nothing...');
}
else {
var o = JSON.parse(fs.readFileSync(exports.data + '/settings.json', 'utf8'));
o[k] = v;
fs.writeFileSync(exports.data + '/settings.json', JSON.stringify(o, null, 2));
return v;
}
}
},
// localStorage stuff
localStorage: {
// get a value from localStorage
get: function (k) {
return exports.internal.objectStorage.impl.get(k);
},
// set a value in localStorage
set: function (k, v) {
return exports.internal.objectStorage.impl.set(k, v);
},
// remove a value from localStorage
remove: function (k) {
return exports.internal.objectStorage.impl.remove(k);
}
},
// utility functions
util: {
// BUG: wrap and its sister function both fuck things up that use `this`
// i know exactly why this happens, but not the slightest clue how to fix it
// manual wrapping is necessary in some cases because of this
//
// trying to use these on any function that uses `this` will fuck that function
// dont do it
// intercept a function's arguments
wrap: function (target1, callback) {
// for security; we're evaluating an untrusted expression in the local scope here
var internal = {};
// get the original function
var orig = evaluate(target1);
// the stub we will overwrite the function with
function stub() {
// what we will pass to the original function
var args;
try {
// call the wrapper and get our args
args = callback.apply(null, arguments);
}
catch (e) {
internal.error(e, 'A function wrapper threw an exception');
// dont completely break the function if there's a flaw in the wrapper
args = arguments;
}
// returning undefined results in the function call being suppressed
if (typeof (args) != 'undefined') {
// call the original function
return orig.apply(null, args)
}
}
stub.original = orig;
stub.callback = callback;
callback = callback.bind(stub);
// do the overwriting thing
eval(`${target1}=stub`);
},
// intercept a function's return value
wrapAfter: function (target1, callback) {
var internal = {};
// get the original function
var orig = evaluate(target1);
// the stub we will overwrite the function with
function stub() {
// call the original argument
var r = orig.apply(null, arguments);
try {
// call the wrapper and return its return value
return callback(r);
}
catch (e) {
internal.error(e, 'A function wrapper threw an exception');
// again, dont fuck stuff up if there's a flaw in the wrapper
return r;
}
}
stub.original = orig;
stub.callback = callback;
callback = callback.bind(stub);
// overwrite that shit
eval(`${target1}=stub`);
},
// extended findFunc that automatically narrows down results
findFuncExports: function (s, e) {
if (s === undefined) throw Error('must provide a search string');
if (e === undefined) e = s;
var results = wc.findFunc(s).filter(x => x !== undefined && x.exports !== undefined && x.exports[e] !== undefined);
if (results.length == 0)
throw Error('findFuncExports() found no matches');
if (results.length > 1)
internal.warn('findFuncExports() found more than one match');
return results[0].exports;
},
findConstructor: function (s, e) {
if (s === undefined) throw Error('must provide a search string');
var results = e !== undefined ? wc.findFunc(s).filter(x => x !== undefined && x.exports !== undefined && x.exports[e] !== undefined) : wc.findFunc(s);
if (results.length == 0)
throw Error('findConstructor() found no matches');
if (results.length > 1)
internal.warn('findConstructor() found more than one match');
return mArr[results[0].i];
}
},
// discord internal modules exposed with webcrack, commented out lines' purposes have been forgotten
internal: {
get constants() { return wc.findCache('API_HOST')[0].exports; },
get dispatcher() { return wc.findCache('Dispatcher').filter(x => x.exports !== undefined && x.exports.Store === undefined && x.exports.default !== undefined)[0].exports; },
//get evnt() { wc.findFunc('MESSAGE_CREATE')[1].exports },
get messageUI() { return exports.util.findFuncExports('receiveMessage'); },
get messageCreation() { return exports.util.findFuncExports('createMessage'); },
get notification() { return exports.util.findFuncExports('showNotification', 'setTTSType'); },
//get hguild() { wc.findFunc('leaveGuild')[0].exports },
//get lguild() { wc.findFunc('markGuildAsRead')[0].exports },
get objectStorage() { return wc.findCache('ObjectStorage')[0].exports; },
get user() { return wc.findCache('getUser')[0].exports; },
getId: () => wc.findCache('getId')[0].exports.getId()
},
// discord internal events stuff
// $api.event.* is has no use outside of epapi internal things
// as such, it has been moved to an internal object
events: {
// $listen('ep-native') without all the fuss
listen: function (type, callback) {
if (type === undefined) throw Error('must provide an event type');
if (callback === undefined) throw Error('must provide a callback');
return $listen('ep-native', e => {
if (e.detail.type == type) {
callback(e.detail);
}
});
},
// forge an event and dispatch it
dispatch: function (event) {
if (event.type === undefined) throw Error('must provide an event type');
return exports.internal.dispatcher.default.dirtyDispatch(event);
},
// intercept and modify an event before it can go anywhere
hook: function (type, callback) {
if (type === undefined) throw Error('must provide an event type');
if (callback === undefined) throw Error('must provide a callback');
var newHook = {
type: type,
callback: callback,
unregister: () => {
var i = internal.hooks.indexOf(newHook);
if (i > -1)
internal.hooks.splice(i, 1);
}
};
internal.hooks.push(newHook);
return newHook;
}
},
// discord api stuff
discord: {
// take a wild guess
rest: async function (method, endpoint, body, c) {
// the url we will be making our request to
var url = "https://discordapp.com/api/v6" + endpoint;
// fetch() options
var options = {
headers: {
// get the token from localStorage as our auth header
'Authorization': exports.internal.objectStorage.impl.get('token'),
'Content-type': 'application/json'
},
method: method
};
// if the body isnt already a string go ahead and stringify it
if (typeof (body) !== 'string') body = JSON.stringify(body);
// probably not the best way to handle this
if (method !== 'GET') options.body = body;
// fetch
var r = await fetch(url, options);
if (!r.ok)
throw Error(await r.text());
// urgh, theyre using callbacks
if (c !== undefined) {
// warn the dev
internal.warn("Using callbacks in REST calls is deprecated and may be removed in a future release.");
// operate like EPAPI =<5.0
c(await r.text());
}
else {
return await r.json();
}
},
// mark a message read
ack: function (channel, id) {
return this.rest('POST', `/channels/${channel}/messages/${id}/ack`);
},
sendMessage: function (channel, text) {
return this.rest('POST', `/channels/${channel}/messages`, { content: text });
},
sendEmbed: function (channel, ebd) {
return this.rest('POST', `/channels/${channel}/messages`, { embed: ebd }
);
},
getGuild: function (id, c) {
return this.rest('GET', `/guilds/${id}`, '', c ? e => c(JSON.parse(e)) : undefined);
},
getChannel: function (id, c) {
return this.rest('GET', '/channels/' + id, '', c ? e => c(JSON.parse(e)) : undefined);
},
getUser: function (id) {
return exports.internal.user.getUser(id);
},
getCurrentUser: function () {
return exports.internal.user.getCurrentUser();
},
getGuildRoles: function (id, c) {
return this.rest('GET', `/guilds/${id}/roles`, '', c ? e => c(JSON.parse(e)) : undefined);
},
getGuildChannels: function (id, c) {
return this.rest('GET', `/guilds/${id}/channels`, '', c ? e => c(JSON.parse(e)) : undefined);
},
getGuildUser: function (guildid, userid, c) {
return this.rest('GET', `/guilds/${guildid}/members/${userid}`, '', c ? e => c(JSON.parse(e)) : undefined);
},
getGuildUsers: function (id, c) {
return this.rest('GET', `/guilds/${id}/members?limit=1000`, '', c ? e => c(JSON.parse(e)) : undefined);
}
},
// ui stuff, including pulling data from the path for some reason
ui: {
// navigate
transitionTo: function (path) {
wc.findCache('transitionTo')[0].exports.transitionTo(path);
},
// focus discord
focus: function () {
electron.getCurrentWindow().focus();
},
// pull the channel id from the url
getCurrentChannel: function () {
var p = window.location.pathname.split('/');
return p[p.length - 1];
},
// pull the guild id from the url
getCurrentGuild: function () {
var p = window.location.pathname.split('/');
return p[p.length - 2];
},
// creates a fake message in the current channel (like clyde)
fakeMsg: function (t, f) {
var msg = exports.internal.messageCreation.createMessage(this.getCurrentChannel(), t);
msg.author.avatar = 'EndPwn'
msg.author.bot = true;
msg.author.discriminator = '0000';
msg.author.id = '1';
msg.author.username = 'EndPwn';
msg.state = 'SENT';
if (typeof (f) != 'undefined') {
f(msg);
}
exports.internal.messageUI.receiveMessage(this.getCurrentChannel(), msg);
},
hideChannels: function () {
$('[class^="channels"]').style.display = 'none';
},
showChannels: function () {
$('[class^="channels"]').style.display = '';
},
hideServers: function () {
$('.guilds-wrapper').style.display = 'none';
},
showServers: function () {
$('.guilds-wrapper').style.display = '';
},
/*hideToolbar: function () {
$('.topic').style.display = 'none';
$('.header-toolbar').style.display = 'none';
},
showToolbar: function () {
$('.topic').style.display = '';
$('.header-toolbar').style.display = '';
},*/
toggleUsers: function () {
wc.findFunc('toggleSection')[1].exports.TOGGLE_USERS.action()
},
// display a dialog box
showDialog: function (x) { // for example, $api.ui.showDialog({title: 'Pwnt!', body: 'It works!'})
exports.util.findFuncExports('e.onConfirmSecondary', 'show').show(x);
},
// display a banner at the top of the app
showNotice: function (text, button) {
exports.util.findFuncExports('ActionTypes.NOTICE_SHOW', 'show').show("GENERIC", text, button, () => { }, 0);
},
// get profile notes for a user
getNote: function (id) {
return exports.util.findFuncExports('getNote', '_actionHandlers').getNote(id);
},
get focused() {
return electron.getCurrentWindow().isFocused();
}
}
}
})();

BIN
favicon.ico Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 15 KiB

63
index.html Normal file
View File

@ -0,0 +1,63 @@
<html prefix="og: http://ogp.me/ns#">
<head>
<title>C&lambda;nergy</title>
<meta property="og:title" content="C&lambda;nergy" />
<meta property="og:description" content="Instructions for installing Cynergy" />
<meta property="og:image" content="https://endpwn.github.io/sigma.png" />
<script>
function updatePayload() {
document.querySelector('code').innerText = `DiscordNative.nativeModules.requireModule("discord_/../electron").remote.getCurrentWindow().loadURL('${location.href}app')`
}
</script>
<style>
@font-face {
font-family: 'IBMVGA8';
src: url('https://cynfoxwell.cf/fonts/ibm_vga8.eot');
src: url('https://cynfoxwell.cf/fonts/ibm_vga8.eot?#iefix') format('embedded-opentype'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.woff2') format('woff2'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.woff') format('woff'),
url('https://cynfoxwell.cf/fonts/ibm_vga8.ttf') format('truetype');
font-weight: normal;
font-style: normal;
}
body {
font-family: 'IBMVGA8' !important;
position: absolute;
top: 50%;
left: 50%;
transform: translateX(-50%) translateY(-50%);
font-family: sans-serif;
text-align: center;
background-color: #1a1d23;
color: #ffffff
}
a {
color: #c0ff80;
}
div {
background: linear-gradient(to bottom right, #c0ff80, #c080ff);
-webkit-background-clip: text;
-webkit-text-fill-color: transparent;
font-size: 72px;
}
</style>
</head>
<body onload="updatePayload()">
<div>C&lambda;nergy</div>
Copy and paste the following string into your Discord console:
<br>
<code>please wait...</code>
<br>
<br>
<b>This is a fork of the unstable, staging branch of EndPwn3. Use at your own risk or use the
<a href="https://endpwn.github.io/endpwn3/">stable EP3 branch</a> instead.</b>
</body>
</html>

115
plugin/customizer.js Normal file
View File

@ -0,0 +1,115 @@
/*
EndPwn3 System (EndPwn Customizer)
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
var internal = {
print: function (str) {
console.log(`%c[Customizer]%c ` + str, 'font-weight:bold;color:#0cc', '');
}
}
exports = {
replacements: {
// fix for custom discrims breaking search
//'#([0-9]{4})':
//'#(.{1,4})',
// endpwn dev badges
//'return t.hasFlag(H.UserFlags.STAFF)':
//'return t.hasFlag(4096)&&r.push({tooltip:"EndPwn Developer",onClick:function(){return window.open("https://endpwn.github.io/","_blank")},class:"endpwn"}),t.hasFlag(H.UserFlags.STAFF)'
},
// fallback data
data: {
guilds: [],
devs: [],
bots: [],
users: {}
},
get me() {
return {
bot: exports.data.bots.indexOf($me()) != -1,
discrim: exports.data.users[$me()]
}
},
update: function () {
// fetch goodies.json
internal.print('fetching data from server...');
fetch('https://endpwn.cathoderay.tube/goodies.json?_=' + Date.now())
.then(x => x.json())
.then(r => endpwn.customizer.data = r);
},
init: function () {
// prevent doublecalling
delete endpwn.customizer.init;
// apply custom discrims/bot tags/badges/server verif from EndPwn Customizer (endpwn.cathoderay.tube)
internal.print('initializing...');
// refetch customizer stuff every half hour
setInterval(endpwn.customizer.update, 1800000);
endpwn.customizer.update();
// add the endpwn dev badge to the class obfuscation table
wc.findFunc('profileBadges:"profileBadges')[0].exports['profileBadgeEndpwn'] = 'profileBadgeEndPwn';
// hook getUser() so we can apply custom discrims/bot tags/badges
$api.util.wrapAfter(
"wc.findCache('getUser')[0].exports.getUser",
x => {
if (x === undefined || x === null) return;
if (endpwn.customizer.data.bots.contains(x.id)) x.bot = true;
if (endpwn.customizer.data.users[x.id] !== undefined) x.discriminator = endpwn.customizer.data.users[x.id];
if (endpwn.customizer.data.devs.contains(x.id)) x.flags += x.flags & 4096 ? 0 : 4096;
return x;
}
);
// make sure devs' badges actually render
$api.events.hook('USER_PROFILE_MODAL_FETCH_SUCCESS', x => { if (endpwn.customizer.data.devs.contains(x.user.id)) x.user.flags += x.user.flags & 4096 ? 0 : 4096; })
// hook getGuild() so we can verify servers
$api.util.wrapAfter(
"wc.findCache('getGuild')[0].exports.getGuild",
x => {
if (x === undefined || x === null) return;
if (endpwn.customizer.data.guilds.contains(x.id)) x.features.add('VERIFIED');
return x;
}
);
}
}

298
plugin/settings.js Normal file
View File

@ -0,0 +1,298 @@
/*
EndPwn3 System (settings UI)
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
exports = {
replacements: {
'{section:H.SectionTypes.DIVIDER},{section:"logout",': '{section:H.SectionTypes.DIVIDER},{section:"ENDPWN",label:"Cλnergy Settings",element:window.BlankSettingsElement,color:"#c8f"},{section:H.SectionTypes.DIVIDER},{section:"logout",'
},
init: function () {
delete endpwn.settings.init;
var currentSection = '';
$api.events.listen('ENDPWN_PSEUDO_IPC', msg => {
$api.localStorage.set('customizer_signature', JSON.parse(msg.data).signature);
console.log(currentSection);
renderSettings(currentSection);
});
window.BlankSettingsElement = $api.util.findConstructor('FormSection', 'FormSection').FormSection;
var buttons = $api.util.findFuncExports('button-', 'colorBlack');
var checkboxes = $api.util.findFuncExports('checkboxEnabled');
var misc = $api.util.findFuncExports('statusRed-', 'inputDefault');
var misc2 = $api.util.findFuncExports('multiInputField');
var headers = $api.util.findFuncExports('h5-', 'h5');
var panels = wc.findFunc('flexChild-')[0].exports;
var panels2 = $api.util.findFuncExports('errorMessage-', 'inputWrapper');
function createVerticalPanel() {
return createElement("div")
.withClass(panels2.vertical, 'epButtonPanel')
}
function createHorizontalPanel() {
return createElement("div")
.withClass(panels.horizontal, 'epButtonPanel')
}
function createButton(name) {
return createElement('button')
.withContents(name)
.withClass(
buttons.button,
buttons.lookFilled,
buttons.colorBrand,
buttons.sizeSmall,
buttons.grow,
'epMargin'
);
}
function createWarnButton(name) {
return createElement('button')
.withContents(name)
.withClass(
buttons.button,
buttons.lookOutlined,
buttons.colorYellow,
buttons.sizeSmall,
buttons.grow,
'epMargin'
);
}
function createDangerButton(name) {
return createElement('button')
.withContents(name)
.withClass(
buttons.button,
buttons.lookOutlined,
buttons.colorRed,
buttons.sizeSmall,
buttons.grow,
'epMargin'
);
}
function createH2(text) {
//h2-2gWE-o title-3sZWYQ size16-14cGz5 height20-mO2eIN weightSemiBold-NJexzi defaultColor-1_ajX0 defaultMarginh2-2LTaUL marginBottom20-32qID7
return createElement("h2")
.withClass(
headers.h2,
headers.title,
headers.size16,
headers.height20,
headers.weightSemiBold,
headers.defaultColor,
'epMargin'
)
.withText(text);
}
function createH5(text) {
return createElement("h5")
.withClass(
headers.h5,
headers.title,
headers.size12,
headers.height16,
headers.weightSemiBold
)
.withText(text);
}
function createInput(v) {
return createElement("input")
.withClass(
misc.inputDefault,
misc.input,
misc.size16,
'epMargin'
)
.modify(x => x.value = v)
}
//<input class="checkboxEnabled-CtinEn checkbox-2tyjJg" type="checkbox">
//switchEnabled-V2WDBB switch-3wwwcV valueUnchecked-2lU_20 value-2hFrkk sizeDefault-2YlOZr size-3rFEHg themeDefault-24hCdX
//switchEnabled-V2WDBB switch-3wwwcV valueChecked-m-4IJZ value-2hFrkk sizeDefault-2YlOZr size-3rFEHg themeDefault-24hCdX
function updateSwitch(s, w) {
if (s.checked) {
w.classList.remove(checkboxes.valueUnchecked.split(' ')[0]);
w.classList.add(checkboxes.valueChecked.split(' ')[0])
}
else {
w.classList.remove(checkboxes.valueChecked.split(' ')[0]);
w.classList.add(checkboxes.valueUnchecked.split(' ')[0])
}
}
function createSwitch(c, i) {
if (c === undefined) c = () => { };
if (i === undefined) i = false;
var s, w = createElement('div')
.withClass(
checkboxes.switch,
checkboxes.switchEnabled,
checkboxes.size,
checkboxes.sizeDefault,
checkboxes.themeDefault
)
.withChildren(
s = createElement("input")
.withClass(
checkboxes.checkbox,
checkboxes.checkboxEnabled
)
.modify(x => x.type = 'checkbox')
.modify(x => x.checked = i)
.modify(x => x.onchange = () => {
updateSwitch(s, w);
c(s.checked);
})
)
updateSwitch(s, w);
return w;
}
function authorizeCustomizer() {
var endpoint = $api.internal.constants.API_HOST;
var url = `https://${endpoint}/oauth2/authorize?client_id=436715820970803203&redirect_uri=https%3A%2F%2Fendpwn.cathoderay.tube%2Fauth%2Fdiscord%2Fintegratedcallback&response_type=code&scope=identify`;
var win = new window.electron.BrowserWindow({
width: 420,
height: 500,
transparent: false,
frame: false,
resizable: true,
nodeIntegration: true
});
win.loadURL(url);
}
function submitCustomizer(d, b) {
fetch('https://endpwn.cathoderay.tube/set', {
headers: {
'Content-type': 'application/json'
},
method: 'POST',
body: JSON.stringify({
id: $me(),
signature: $api.localStorage.get('customizer_signature'),
discriminator: d,
bot: b
})
}).then(r => {
r.text().then(k => {
$api.ui.showDialog({
title:'Server Response',
body: k
});
});
endpwn.customizer.update();
});
}
function renderSettings(e) {
currentSection = e;
if ($("#ep_settings")) $("#ep_settings").remove();
if (e.section == "ENDPWN") {
var pane = $(".content-column.default");
if (!pane) return;
var needAuth = !$api.localStorage.get('customizer_signature');
var content = createElement('div')
.withId('ep_settings')
.withClass('flex-vertical')
.withChildren(
createElement("div")
.withClass('epSettingsHeader')
.withText('Cλnergy Settings'),
)
.appendTo(pane);
if (!$api.localStorage.get('customizer_signature')) {
createHorizontalPanel()
.withChildren(
createButton("Authorize EndPwn Customizer")
.modify(x => x.onclick = authorizeCustomizer)
)
.appendTo(content);
}
else {
var discrim, bot;
createVerticalPanel()
.withChildren(
createH5('Discriminator'),
createHorizontalPanel()
.withChildren(
discrim = createInput(endpwn.customizer.me.discrim ? endpwn.customizer.me.discrim : '')
.withClass('epDiscrimField')
.modify(x => x.maxLength = 4),
createVerticalPanel()
.withChildren(
createH5('Bot?'),
bot = createSwitch(() => { }, endpwn.customizer.me.bot)
),
createButton("Submit")
.modify(x => x.onclick = () => submitCustomizer(discrim.value, bot.children[0].checked))
)
)
.appendTo(content);
}
createElement("div")
.withClass(panels.horizontal, 'epButtonPanel')
.withChildren(
createButton("Open Data Folder")
.modify(x => x.onclick = () => { electron.shell.openExternal($api.data) }),
createWarnButton("Restart in safe mode")
.modify(x => x.onclick = endpwn.safemode),
createDangerButton("Uninstall EndPwn")
.modify(x => x.onclick = endpwn.uninstall)
)
.appendTo(content);
}
}
$api.events.hook("USER_SETTINGS_MODAL_SET_SECTION", renderSettings);
$api.events.hook("USER_SETTINGS_MODAL_INIT",e=>setTimeout(_=>renderSettings(e),200));
}
}

61
plugin/system.css Normal file
View File

@ -0,0 +1,61 @@
/*
EndPwn3 System (style component)
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
/* style declaration for EndPwn developer badge */
.profileBadgeEndPwn {
background-image: url(https://dr1ft.xyz/sigma_solid.svg);
background-position: center;
background-repeat: no-repeat;
width: 16px;
height: 16px;
cursor: pointer
}
/* fix for poor formatting on modified crash screen */
[class*="text-"] [class*="note"] {
line-height: normal !important;
text-align: left !important
}
/* settings page stuff */
.epSettingsHeader {
background: linear-gradient(to bottom right, #cf8, #c8f);
-webkit-background-clip: text;
-webkit-text-fill-color: transparent;
font-size: 36px;
padding-bottom: 8px;
}
.epButtonPanel {
flex: 1 1 auto;
margin-bottom: 8px;
}
.epMargin {
margin-right: 8px;
margin-bottom: 8px;
}
.epDiscrimField {
width: 100px;
text-align: left;
}

199
plugin/system.js Normal file
View File

@ -0,0 +1,199 @@
/*
EndPwn3 System (bootstrap)
Copyright 2018 EndPwn Project
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
DO NOT EDIT THIS FILE! Your bootstrap may overwrite changes to it, and you will lose your work!
EndPwn3 users: You can prevent this by creating a file in the same directory named DONTUPDATE
https://github.com/endpwn/
*/
var internal = {
print: function (str) {
console.log(`%c[EndPwn3]%c ` + str, 'font-weight:bold;color:#0cc', '');
}
}
exports = {
preload: function () {
window.reload = () => { app.relaunch(); app.exit(); };
window.endpwn = {
// safemode
safemode: function () {
$api.ui.showDialog({
title: 'EndPwn: safe mode',
body: 'This will restart your client in a state without plugin support.',
confirmText: 'Yes', cancelText: 'No',
onConfirm: () => {
$api.localStorage.set('safemode', 1);
window.electron.getCurrentWindow().reload();
}
});
},
// uninstaller
uninstall: function () {
$api.ui.showDialog({
title: 'EndPwn: confirm uninstallation',
body: 'Are you sure you want to remove EndPwn from your client? You can reinstall it at any time.',
confirmText: 'Yes', cancelText: 'No',
onConfirm: () => {
var data = $api.data;
$api.settings.set('WEBAPP_ENDPOINT');
$api.settings.set('WEBAPP_PATH');
reload();
}
});
},
// endpwn customizer
customizer: krequire('customizer'),
// settings page stuff
settings: krequire('settings'),
// wrapper function for dispatch()
// intended to simplify using executeJavaScript() from other windows as a bad IPC method
// we do this since afaik we cant use electron.ipc in a useful way (maybe im wrong? if i am ill make this better later on lol)
pseudoipc: function (e) {
$api.events.dispatch({
type: 'ENDPWN_PSEUDO_IPC',
data: e
});
},
__eval: e => eval(e)
};
// fetch the changelog
internal.print('retrieving changelog...');
fetch('https://endpwn.github.io/changelog.md?_=' + Date.now()).then(r => r.text()).then(l => {
var data = l.split(';;');
window.endpwn.changelog = {
date: data[0],
body: data[1]
};
});
// early init payload
document.addEventListener('ep-prepared', () => {
// disable that obnoxious warning about not pasting shit in the console
internal.print('disabling self xss warning...');
$api.util.findFuncExports('consoleWarning').consoleWarning = e => { };
// fuck sentry
internal.print('fucking sentry...');
var sentry = wc.findCache('_originalConsoleMethods')[0].exports;
window.console = Object.assign(window.console, sentry._originalConsoleMethods); // console
sentry._wrappedBuiltIns.forEach(x => x[0][x[1]] = x[2]); // other stuff
sentry._breadcrumbEventHandler = () => () => { }; // break most event logging
sentry.captureBreadcrumb = () => { }; // disable breadcrumb logging
});
},
replacements: {
// changelog injection
'key:"changeLog",get:function(){return E}':
'key:"changeLog",get:function(){if(!E.injected){E.injected=1;E.date=E.date<=window.endpwn.changelog.date?window.endpwn.changelog.date:E.date;E.body=window.endpwn.changelog.body+"\\n\\n"+E.body}return E}',
// crash screen hijack
'var e=o("div",{},void 0,o("p",{},void 0,a.default.Messages.ERRORS_UNEXPECTED_CRASH),o("p",{},void 0,a.default.Messages.ERRORS_ACTION_TO_TAKE)),t=o(c.default,{size:l.ButtonSizes.LARGE,onClick:this._handleSubmitReport},void 0,a.default.Messages.ERRORS_RELOAD);return o(u.default,{theme:this.props.theme,title:a.default.Messages.UNSUPPORTED_BROWSER_TITLE,':
`var e=o("div",{},void 0,o("p",{},void 0,"Something has gone very, very wrong, and Discord has crashed."),o("p",{},void 0,"If this is the first time you've seen this error screen, reload and hope for the best. If this screen appears again, follow these steps:"),o("p",{},void 0,"Try removing any new plugins and restarting again. If this solves the problem there may be a bug in a plugin or a conflict."),o("p",{},void 0,"If problems continue, it's likely that there is a bug in EndPwn or Discord."),o("p",{},void 0,"If you need help, join the EndPwn Discord server (https://discord.gg/wXdPNf2)"),o("p",{},void 0,"Details may be available in the console (Ctrl+Shift+I), but at this level of crash we can't be certain.")),t=o("div",{},void 0,o(c.default,{size:l.ButtonSizes.LARGE,onClick:()=>window.electron.getCurrentWindow().reload()},void 0,"Reload"),o(c.default,{size:l.ButtonSizes.LARGE,onClick:()=>{window.$api.localStorage.set('safemode',1);window.electron.getCurrentWindow().reload()}},void 0,"Reload in safe mode"));return o(u.default,{theme:this.props.theme,title:"Discord: Fatal Error",`
},
start: function () {
// disable analytics
internal.print('disabling analytics...');
$api.util.findFuncExports("AnalyticEventConfigs").default.track = () => { };
// enable experiments
internal.print('enabling experiments menu...');
$api.util.findFuncExports('isDeveloper').__defineGetter__('isDeveloper', () => true);
// if we used start() in the other files, it would create a different instance -- we dont want that
endpwn.customizer.init();
endpwn.settings.init();
// check for epapi updates
if ($api.lite || !fs.existsSync($api.data + '/DONTUPDATE'))
(function () {
internal.print('checking for EPAPI updates...');
// fetch the latest build of epapi
fetch('https://endpwn.github.io/epapi/epapi.js?_=' + Date.now()).then(x => x.text()).then(x => {
// check the version
if (kparse(x).version > $api.version) {
// if the version on the server is newer, pester the user
$api.ui.showDialog({
title: 'EndPwn3: EPAPI Update Available',
body: 'An update to EPAPI has been released. It is recommended that you restart your client in order to gain access to new features and maintain compatibility.',
confirmText: 'Restart Now', cancelText: 'Later',
// user pressed "Restart Now"
onConfirm: () => {
// refresh the page if we're running in a browser, reboot the app if we're running outside of lite mode
reload();
},
// they pressed "Later", for some reason
onCancel: () => {
// bother them again in 6 hrs (* 60 min * 60 sec * 1000 ms)
setTimeout(arguments.callee, 6 * 60 * 60 * 1000);
}
});
}
else setTimeout(arguments.callee, 6 * 60 * 60 * 1000);
});
})();
}
}
/*
Now all this crazy drama
All up in my face
All I really wanted
Was to be alone in space
*/