[TUTORIAL] Auto-Fill and Submit CPA Forms

asthenic · Mar 16, 2011

pretty sick scripting if you ask me, but im a noobie at it regardless.

lol at idiots saying "omfg i go to jail?" ... try leaving ur computer once in awhile.

Ive done out and out fraud and been caught extremely red handed, faking / frauding CPA offers over the internet through proxies and multiple countries from a shady company to begin with... is nothing. You really think an investigation will be launched with enough evidence to prove that YOU commited the fraud / ect. Im sure CPA companies just close you out and keep the monies / give back.

anandganni · Mar 16, 2011

f0rked said:
If you're going to go this route, I suggest you find offers that allow you to pre-populate the email form via the URL and not via an injection. These offers aren't everywhere, but chances are if you're with a network with one of the offers that can be exploited, they have a pre-pop somewhere as well.

if i iframe an offer...is there a chance to pre populate the iframed offer...

f0rked · Mar 16, 2011

anandganni said:
if i iframe an offer...is there a chance to pre populate the iframed offer...

Of course. Most offers that allow you to pre-populate the email form uses something like &[email protected], or &[email protected] that you would append to the end of the offer URL.

The way you would mix that with iframes is that you'd have a script pull an email from say a list, array, SQL database and set the iframe url based on that.

However, if the network you're using doesn't have any pre-populated offers, you'll have to use the XSS exploit in order to do it. As I mentioned earlier in this thread though, this will cause IE to throw an error(by default it blocks XSS attempts) so the best route would be to find offers that allow you to pre-populate the form if you're going to iframe.

blade_ · Mar 28, 2011

Hello. I have this problem:
I am not from US and use proxy to test.
1. I goed to CPAJuice and make acc
2. Get link for offert and make it like this to test him:

Code:

http://a.hittrac.com/aff_c?offer_id=56&aff_id=(my_aff_nubber)"><script%20src="http://ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js"%20type="text/javascript"></script><script%20type="text/javascript">$(document).ready(function()%20{alert("Exploited.");});</script>

but noting happen :X CAn someone help me on this pls. Give ideas for proxy,offer....thinks like this.
Thanks alllot!

jbaem666 · Apr 7, 2011

hy
that sounds quite intersting and worth a try.
but i'm having a problem right at the beginning:
when i try to test an offer/page with the code at the end of the link, nothing happens. but i tried it with amny other pages too, and always the same thing.
so could someone please givce me a site wich will show me the message that it can be exploited. just for me to know if the site is really not exploitable or if it is a problem on my end somehow...
would be great, THX

artizhay · Apr 7, 2011

jbaem666 said:
hy
that sounds quite intersting and worth a try.
but i'm having a problem right at the beginning:
when i try to test an offer/page with the code at the end of the link, nothing happens. but i tried it with amny other pages too, and always the same thing.
so could someone please givce me a site wich will show me the message that it can be exploited. just for me to know if the site is really not exploitable or if it is a problem on my end somehow...
would be great, THX

You may be using a non-working code that I accidentally posted and can no longer edit. Try this instead (added on parenthesis...):

Code:

"><script%20src="http://ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js"%20type="text/javascript"></script><script%20type="text/javascript">$(document).ready(function()%20{alert("Exploited.");});</script>

pr3ttyNp1nk · Apr 7, 2011

fun4uoc said:
Of course it is.

This is straight up fraud, NOT blackhat.

Oh? I think you are mistaken. Doing fraud is blackhat. I think you should research the definition of blackhat a little bit.

jbaem666 · Apr 8, 2011

artizhay said:
You may be using a non-working code that I accidentally posted and can no longer edit. Try this instead (added on parenthesis...):

Code:

"><script%20src="http://ajax.microsoft.com/ajax/jquery/jquery-1.4.2.min.js"%20type="text/javascript"></script><script%20type="text/javascript">$(document).ready(function()%20{alert("Exploited.");});</script>

THX
but i am still getting errors, either "404 not found" or it asks if i typed sth wrong.
so could you PLEASE give me an url+code that works 100%, just for me to be sure i did everything correct...

a1b2c3 · Apr 9, 2011

The problem with this technique is that in the http logs there will be an XSS vector containing your CPA ID and as soon as anyone sees that you'll be banned. The other issue is not all CPA offers will be exploitable. It'd be easier to just use a bot with proxies (or even a botnet, if you wish to go there) and you'd have less chance of getting caught. I doubt you'd get in any legal trouble but I don't think it's worth risking your CPA account.

meannn · May 12, 2011

a1b2c3 said:
The problem with this technique is that in the http logs there will be an XSS vector containing your CPA ID and as soon as anyone sees that you'll be banned. The other issue is not all CPA offers will be exploitable. It'd be easier to just use a bot with proxies (or even a botnet, if you wish to go there) and you'd have less chance of getting caught. I doubt you'd get in any legal trouble but I don't think it's worth risking your CPA account.

Yep. Bad news.

artizhay · May 12, 2011

meannn said:
Yep. Bad news.

After a month of no replies, you felt it was necessary to post three unnecessary words?

peppe · May 12, 2011

I don't care if it's fraud or BH what I want to know is if anyone is having succes wih this?

Bwaht · May 14, 2011

OP could you PM me the list you have?

Thanks

fuskaren · May 14, 2011

This is a great guide! But I can't use it because I don't have an email list.

But I'll remember it, because that day will come!

Vincent88 · May 14, 2011

peppe said:
I don't care if it's fraud or BH what I want to know is if anyone is having succes wih this?

Yep made a few leads with, but I sent legit traffic too to be under the radar

CPACash · May 29, 2011

Anyone want to set this up for me? Paypal Ready. I cant seem to get it to work.

Hydro · May 29, 2011

I'm having this same database issue. My error is:

Code:

[B]Parse error[/B]:  syntax error, unexpected T_STRING, expecting ',' or ';' in [B]/home/popcultn/public_html/index.php[/B] on line [B]9
[/B]

Line 9 is my echo line, the URL I am using works on standalone but when I try to run it with the PHP it keeps erroring.. Please help!

f0rked said:
It depends on what line 24 is. If line 24 is the <?php line of my code, and the <?php tag is already opened before it, that's why it's throwing the error. You'd also remove the ?> line from the bottom unless that's the end of your code.

EDIT: If I remove the bottom line closing the PHP code the error changes to:

Code:

[B]Parse error[/B]:  syntax error, unexpected '<' in [B]/home/popcultn/public_html/index.php[/B] on line [B]9

[/B]

riktubrs · May 29, 2011

Great tutorial, thank you!

tolQu · May 29, 2011

Thank you so much

Hydro · May 30, 2011

Okay, scratch my last post - I got it figured out.

New issue though, I'm trying to setup the database with PHP. Instead of loading a seperate iframe for each email, it loads an iframe for every email all at once on one page.. So say I have 5 emails in my .txt file, it loads 5 seperate iframes on the page. Here is my code snippet, any help is greatly appreciated:

Code:

<?
function getEmail(){
    $file = "emails.txt";
    $emails = file($file);
    foreach($emails as $email) {
    $email=trim($email);
    echo '(MY OFFER/INJECT CODE)';
}
}

getEmail();

?>

[TUTORIAL] Auto-Fill and Submit CPA Forms

Newbie

Junior Member

Registered Member

Registered Member

Newbie

BANNED

Newbie

Newbie

Newbie

Elite Member

BANNED

Regular Member

Regular Member

Junior Member

Junior Member

Junior Member

BANNED

Regular Member

Newbie

BANNED

Main Menu

Marketplace

Making Money

BlackHat World