/** @jsxImportSource npm:hono@3/jsx */ import { fetch } from "https://esm.town/v/std/fetch"; import { faker } from "npm:@faker-js/faker"; import CryptoJS from "npm:crypto-js"; import { Hono } from "npm:hono"; import { timeout } from "npm:hono/timeout"; const commonHeaders = { "accept": "*/*", "accept-language": "en-US,en;q=0.9", "user-agent": faker.internet.userAgent(), "priority": "u=4, i", "sec-ch-ua": "\"Not)A;Brand\";v=\"99\", \"Google Chrome\";v=\"127\", \"Chromium\";v=\"127\"", "sec-ch-ua-mobile": "?0", "sec-ch-ua-platform": "\"Windows\"", "sec-fetch-dest": "empty", "sec-fetch-mode": "cors", "sec-fetch-site": "same-origin", "Referrer-Policy": "strict-origin-when-cross-origin", }; async function uuidGen() { const randomBytes = CryptoJS.lib.WordArray.random(16); let hex = randomBytes.toString(CryptoJS.enc.Hex); hex = hex.replace(/^(.{8})(.{4})(.{4})(.{4})(.{12})$/, "$1-$2-4$3-$4-$5"); hex = hex.replace(/(.{19})[89abAB]/, (match, p1) => p1 + "8"); return hex; } async function boundGen() { const randomBytes = CryptoJS.lib.WordArray.random(16); const hex = randomBytes.toString(CryptoJS.enc.Hex); const boundary = "----WebKitFormBoundary" + hex; return boundary; } async function formDataGen(files: File[]) { const boundary = await boundGen(); let body = ""; for (const file of files) { let type = file.type; if (file.type === "text/html") type = "text/plain"; if (file.type === "text/javascript") type = "application/javascript+module"; body += `--${boundary}\r\n`; body += `Content-Disposition: form-data; name="${file.name}"; filename="${file.name}"\r\n`; body += `Content-Type: ${type}\r\n\r\n`; body += `${await file.text()}\r\n`; } body += `--${boundary}\r\n`; body += `Content-Disposition: form-data; name="metadata"; filename="blob"\r\n`; body += `Content-Type: application/json\r\n\r\n`; body += `{"compatibility_date":"2024-03-07","compatibility_flags":["nodejs_compat"],"main_module":"index.js"}\r\n`; body += `--${boundary}--`; return { boundary, body, }; } async function upload(formData: any, user: string) { const _ = await fetch("https://workers.cloudflare.com/playground/api/worker", { "headers": { ...commonHeaders, "content-type": `multipart/form-data; boundary=${formData.boundary}`, "cookie": "user=" + user, "Referer": "https://workers.cloudflare.com/playground", }, "body": formData.body, "method": "POST", }); const data = await _.json(); return Response.json(data); } const app = new Hono(); app.get("/regUser", async (c) => { const uuid = await uuidGen(); const uid = await fetch("https://workers.cloudflare.com/playground", { "headers": { "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7", "accept-encoding": "gzip, deflate, br, zstd", "referer": "https://workers.cloudflare.com/", }, }); const user = (await uid.headers.get("set-cookie")).split(";")[0].split("user=")[1]; if (c.req.query("ct")) { return c.html(

[cool-workers] - Proof of concept devoloped by cool-dev-guy@github.com

        User : {user}

        UUID : {uuid}

        Site : https://{uuid}.cloudflarepreviews.com/

        Code : /pushCode?uuid={uuid}&token={user}
        cool-dev-guy@github.com

, ); } return c.json({ data: { user: user, site: `https://${uuid}.cloudflarepreviews.com/` } }); }); app.post("/pushCode", async (c) => { const body = await c.req.parseBody({ all: true }); console.log(body); const token = body["token"] as string; const uuid = body["uuid"] as string; const FILES = await body["files"] as File[]; console.log(FILES); if (!FILES) return Response.json({ error: "No files found" }); else if (FILES.length === undefined) return Response.json({ error: "Minimum upload 2 files." }); const customFormData = await formDataGen(FILES); return await upload(customFormData, token); }); app.get("/updateHelp/:path", async (c) => { const { path } = c.req.param(); const { token, uuid } = c.req.query(); if (!token || !uuid) { return c.json({ error: "Access Denied !!!!" }); } return c.json({ data: { update: `https://${uuid}.cloudflarepreviews.com/.update-preview-token?token=${token}&suffix=/${path}`, headers: { "User-Agent": faker.internet.userAgent(), "Sec-Fetch-Dest": "iframe", "referer": "https://workers.cloudflare.com/", "Cookie": `token=${token}`, }, }, }); }); app.get("/pushCode", async (c) => { const { token, uuid } = c.req.query(); if (!token || !uuid) { return c.json({ error: "Access Denied !!!!" }); } return c.html(

[cool-workers] - Proof of concept devoloped by cool-dev-guy@github.com

, ); }); export default app.fetch;