Planning on making my own twitter bot.

ekuin0x

Banned - selling outside of the marketplace.
Joined
Dec 28, 2023
Messages
123
Reaction score
130
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?
 
Yes, you can automate account creation like anything else. Use IMAP to verify the email address programmatically, or an SMS library if you are verifying with phone. You will also need a captcha solving service. Speaking from my own experience building a TikTok registration bot.
 
puppeteer or playwright are better
use anti detect browser like gologin

for account creation headful mode is necessity unless the website you're working on doesn't have strict requirements

use database to save and retrieve data, sqllite will be better than other things as it's just a file that doesn't require auth if you set it so
 
  • Like
Reactions: AOT
Yes, you can automate account creation like anything else. Use IMAP to verify the email address programmatically, or an SMS library if you are verifying with phone. You will also need a captcha solving service. Speaking from my own experience building a TikTok registration bot.
Thank you that was helpful. May I ask about your experience in the field? is the automation-bots niche still profitable and what are the most successful methods to make profit?
 
Make your bot to simulate human actions as close as possible to stay under the radar...these days social networks use patters recognition with AI and you will get a lot of accounts banned if you don't do it the right way.
 
I operate a tiktok scraping SaaS (Toughdata) which you can find on the BHW marketplace. As a freelancer I've made custom bots for various brands. Theres endless ways to make it profitable as long as you can address someone's needs.
That's really awesome, thanks for helping.
 
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?

I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
 
I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
Great idea! I'll look into it. Thanks
 
I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
1. how to check requests sent via a mobile app from a real phone?
2. how do you send requests without a mobile app? do you send mobile footprint? afaik it's almost impossible to fake mobile device reliably
3. why not just reverse engineer a platform using desktop?
 
1. how to check requests sent via a mobile app from a real phone?
2. how do you send requests without a mobile app? do you send mobile footprint? afaik it's almost impossible to fake mobile device reliably
3. why not just reverse engineer a platform using desktop?

Okay, a real short and easy description, without digging too deep into the details:

1. A special proxy cascade with custom extensions, SSL unpinning, decryption, several iPhones, a lot of work (weeks to months of daily work). Unfortunately at the end of your research you always go like "oh my god, how dumb I was...".

2. A special toolset written in C++, for the first tests you can also use PHP/libcurl. No use of emulators, ADB bridges, connected phones.

3. Most apps I know limit their functions at the web interface, at least the ones I coded bots for. So the real app has more functions than the web interface. Therefore I always prefer the real app. BTW I wouldn't call the task of rebuilding web requests (browser) as "reverse engineering".

Hopefully this was not too technical. ;-)
 
2. A special toolset written in C++, for the first tests you can also use PHP/libcurl. No use of emulators, ADB bridges, connected phones.
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).
 
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).

Well, I will have a little more time end of January, I should consider creating a little "how to" or "journey" thread about reverse engineering in a nutshell.

I wrote "toolset" because this is a huge bunch of modules and libraries coded in C++. Some are responsible for plain HTTP/1.1 or HTTP/2.0 requests, some for authentication steps (device init, login etc.), some for regular tasks (e. g. follow, like, message) and some for special tasks like unifying videos (make them look unique).

To appear like a human app user is easier than you may think, you just have to build a workflow around all activities. So not just: sign up, login, follow, follow, follow.

Of course there are a few SMM panels that use connected phones to control TikTok, this usually works with ADB (ADB bridges). But when it comes to the recognition of incoming messages (detect them, scan their content, send a matching reply) ADB doesn't work anymore. Some try to use OCR then, but... forget it.

On the other hand, if you really have a "client less" (no connected phones) environment, based on real reverse engineered app code, you can simply call a method and will receive all incoming messages in real text. No OCR, 100 % matches, 100 % matching replies.
 
Well, I will have a little more time end of January, I should consider creating a little "how to" or "journey" thread about reverse engineering in a nutshell.

I wrote "toolset" because this is a huge bunch of modules and libraries coded in C++. Some are responsible for plain HTTP/1.1 or HTTP/2.0 requests, some for authentication steps (device init, login etc.), some for regular tasks (e. g. follow, like, message) and some for special tasks like unifying videos (make them look unique).

To appear like a human app user is easier than you may think, you just have to build a workflow around all activities. So not just: sign up, login, follow, follow, follow.

Of course there are a few SMM panels that use connected phones to control TikTok, this usually works with ADB (ADB bridges). But when it comes to the recognition of incoming messages (detect them, scan their content, send a matching reply) ADB doesn't work anymore. Some try to use OCR then, but... forget it.

On the other hand, if you really have a "client less" (no connected phones) environment, based on real reverse engineered app code, you can simply call a method and will receive all incoming messages in real text. No OCR, 100 % matches, 100 % matching replies.
You make it sound like creating a custom bot with web requests is always the best solution.
Did you ever work with Instagram? Did you check all the requests they are doing?
How would you emulate all of this with your libraries?
 
Did you ever work with Instagram? Did you check all the requests they are doing?
How would you emulate all of this with your libraries?

I was into Instagram a few years ago, but only for some researches.

Compared to other social media apps Instagram is very easy to bot. There are many existing solutions on the market already (a few working with the unofficial Instagram API based on the reverse engineered app), so I personally don't want to create another one.
 
It seems like browser or real device solutions would be harder to detect in the long run
 
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?

are they all made using different ips ? because if there all made on 1ip
when 1 accounts gets banned, they all go down.
 
are they all made using different ips ? because if there all made on 1ip
when 1 accounts gets banned, they all go down.
ofc different IPs
 
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?

You shouldn't automate brand new accounts unless you absolutely need to, in my opinion.
 
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).
This might be difficult, the kind of thread can easily make it obvious it's a bot.
 
Back
Top