please enjoy my shady url generator :3
-
please enjoy my shady url generator :3
https://tools.entities.org.uk/shadyurl.php
or alternatively
https://tools.entities.org.uk/redir.php?topicid=237&resource=Jg1rOLzH&referrer=new-2025&src=634&__proxy_cache=dzt1dG5uX3NvdXJjZTtfX2NmX2NobF9ydF90aw%3D%3D&w=uo1viP8kQ1zBQgf9I9Xm6lh29j5Y0nr%2Fvny4Qg7g4ww%3D&utnn_source=bJEmOeEFaO48HTlkW88Abg7HfXV5IQIt&__cf_chl_rt_tk=0TdJJBsFJyFVRd8LlvKXddDb50Yd9KxdbNiwcTrO1LUHPYDRJmIw3k8v&continue=Lfdk35NH&__proxy_valid=true&pid=306&uttm_campaign=pubg&_x=2LWIkx2JPbdcuCu6cse5P%2FXx19%2FZcxSji7QrNHm7&t=KZVRlBt39KLyHC30&xid=nx6%2FwVD5y9qsh1vTMX8UiNHwcpcOyBmlQcVRtg%3D%3D&filename=partition_killaura_Whatsapp_snoop.jar -
please enjoy my shady url generator :3
https://tools.entities.org.uk/shadyurl.php
or alternatively
https://tools.entities.org.uk/redir.php?topicid=237&resource=Jg1rOLzH&referrer=new-2025&src=634&__proxy_cache=dzt1dG5uX3NvdXJjZTtfX2NmX2NobF9ydF90aw%3D%3D&w=uo1viP8kQ1zBQgf9I9Xm6lh29j5Y0nr%2Fvny4Qg7g4ww%3D&utnn_source=bJEmOeEFaO48HTlkW88Abg7HfXV5IQIt&__cf_chl_rt_tk=0TdJJBsFJyFVRd8LlvKXddDb50Yd9KxdbNiwcTrO1LUHPYDRJmIw3k8v&continue=Lfdk35NH&__proxy_valid=true&pid=306&uttm_campaign=pubg&_x=2LWIkx2JPbdcuCu6cse5P%2FXx19%2FZcxSji7QrNHm7&t=KZVRlBt39KLyHC30&xid=nx6%2FwVD5y9qsh1vTMX8UiNHwcpcOyBmlQcVRtg%3D%3D&filename=partition_killaura_Whatsapp_snoop.jaressentially: the parameter
__proxy_cache
contains a base64 encoded string with 3 other parameter names separated by semicolonsthose three parameters are used as a key, nonce and ciphertext respectively (again all base64 encoded), which are passed to libsodium's
sodium_crypto_stream_xor
function (at least that's what it's called in php) to unscramble the actual url from the ciphertext. then it redirects there. the only purpose of obfuscating it like this is to try to make the encoded url harder to detect (e.g. by browser extensions that detect shady links :3)all the other parameters are just filler to make it look more sus
-