OccultKingdoms
BANNED
- Mar 11, 2013
- 5,542
- 9,844
Haha. I like your writing style. Lucky.sparks recommended your profile FYI. Your idea of automation looks similar to his.
Hustling 247 u dont do any of that. Only onlineSo to recap:
Been toying with a very similar idea (albeit at a much smaller scale than you) and just wanted to suggest the r/tiktokthots subreddit as a source.Issue #1
TikTok, unlike instagram doesn't allow us to get the newest posts for a hashtag it only displays the content you 'should' like, so how the hell do we keep a steady flow of fresh content?
Let's do some
View attachment 218333
Let's say we would like to run 1k accounts, uploading 10 shorts per day, that's 10k shorts/day
1 short would consist of 3 TT videos, means we need 30k TT videos/day
A quick google search shows us that you should upload 2-3 videos if you want to become popular, but obviously not all users are going to do that, so let's just pretend that each user is uploading 1 video per day.
View attachment 218335
Means that we should monitor 30k TT accounts every day and download their videos, why not huh?
IMO with shorts the video quality plays a huge role, so having videos of kittens in a hot girls compilation would not be acceptable, the source channels should all be checked.
Getting the source channels
Step 1 - we manually create a source of 'sexy' tags to scrape like 'sexy' , 'bikini' , 'thightok' ,'thottok' (this was a good one) etc.
We are left with a decent list of accounts.
Step 2 - Scrape all the accounts from step 1 to gather their most used sounds and hashtags
Step 3 - We scrape all the sounds and hashtags for users - we have a large list of accounts
Step 4 - We scrape each accounts tiktok page getting some useful information like followers count, likes count, 10 last videos thumbnails and most importantly uploaded videos count
Step 5 - We discard the accounts that have uploaded less than 50 videos ( don't want to waste resources on monitoring half dead accounts) and
Step 6 - We download a pre-trained NSFW classifier https://github.com/notAI-tech/NudeNet and run the 10 images we have downloaded for all accounts through it,
Then we get the average tendency of images being 'sexy' and the number of NSFW videos per account ( from the 10 scraped earlier)
View attachment 218336
Step 7 - Now we could pretty accurately guess if the account is NSFW or not by NSFW count alone, let's say we would only take the accounts that have 4 NSFW videos, because we want quality and consistency, not someone who uploads one twerking video once in a while
Step 8 - Finally we have some source accounts we can use, although when going through some of the accounts I noticed some, let's say, not so appealing ones.
- Sometimes there's a guy in a video
- Sometimes the girl is ugly
- Sometimes the videos are inconsistant, for exmple, some videos are just a still image, and that's not what we need.
It is complicated to solve such problems programmatically because each of us understands beauty differently, so it's hard for the machine as well.
So I decided the last moderation step should be manual, the script takes one account ( that has 50+ videos and at least 4NSFW videos of last 10), opens the page and allows the user to do scroll the feed and decide manually if the account is worth to be used as a source.
Going through only several hundred of accounts made me realize that it is going to take way too long and I am just too lazy, so the script was sent to the VA, hopefully he has the same taste as I do in women
![]()
Next..
Set up a db, create a scraper that monitors all accounts every day, downloads new videos and creates the compilations.
![copqlEb[1].png copqlEb[1].png](https://www.blackhatworld.com/data/attachments/541/541212-2ba1ca8825bf5fb92374b60096090712.jpg?hash=K6HKiCW_X7)
![ben-stiller-eye-roll[1].gif ben-stiller-eye-roll[1].gif](https://www.blackhatworld.com/data/attachments/541/541213-3db6d2d9f8c5a755c4091e716238ba4c.jpg?hash=PbbS2fjFp1)
![fMuX4Rx[1].png fMuX4Rx[1].png](https://www.blackhatworld.com/data/attachments/541/541214-504b8b38078db492a6d28a34beb94f72.jpg?hash=UEuLOAeNtJ)
![5wBEpgx[1].png 5wBEpgx[1].png](https://www.blackhatworld.com/data/attachments/541/541215-b456142222f262f7a7cdf096c0cfd3a0.jpg?hash=tFYUIiLyYv)
![D0tvowH[1].gif D0tvowH[1].gif](https://www.blackhatworld.com/data/attachments/541/541216-c9fdf58e0da75c3fbf8e64d046f6e446.jpg?hash=yf31jg2nXD)
![yZCx1sa[1].png yZCx1sa[1].png](https://www.blackhatworld.com/data/attachments/541/541218-d82de0a11f4de43a22b2b37b5fba40ab.jpg?hash=2C3goR9N5D)
![drguKe6[1].png drguKe6[1].png](https://www.blackhatworld.com/data/attachments/541/541219-d06156d66c2aa82a03808ece2d379eb7.jpg?hash=0GFW1mwqqC)


That's amazing!!! Thanks for the update!My previous post was deleted because I linked a page, so there might be a small gap for those who didn't read it in time.
@reaaski Funnily enough it was the @lucky.sparks thread that I stumbled upon when searching for gmail accounts that really triggered that urge to put my black hat on, to anyone who haven't yet his thread is a must read!
@optimalprime hope the following will answer your question.
Really getting carried away with this project and didn't have the time to update thread earlier, but I feel like I have to do it now, not to forget the important details. so here it goes.
Spoiler alert - there's going to be a lot of scraping.
Handpicking the user(source) accounts seems to be not sustainable, so we have to make a fully autonomous system, heck it's 2022 , with the technology we have access to it definitely is possible, it's only a question of persistence, and that I don't lack.
Will be writing everything in the same order that it happened, so you would also understand that you (at least I) can't get it right the first time always.
We've got a source of about 10k semi-filtered adult accounts, how can we find other related accounts?
Scrape all their posts to find the most frequently used hashtags and sounds, sounds good ay?
Akamai has joined the lobby
Tiktok has many annoying ways of blocking you without actually telling you that you're blocked, say you make a request to /@Account - everything loads, but it has no posts, okay let's continue?
But you open the very same account with your browser and there it is, a ton of posts
Solution- We work with requests until we get no posts returned from the account, once that happens we fire up our nifty browser, show Akamai that we're the real deal, solve captcha if needed, save the cookies and continue working with requests.
View attachment 219035
Notes, some countries work much better than others.
The captcha get's worse depending on how much you're spamming, starting from the slider one, to the 'select two identical images' and the rotation thing if you really fucked up.
Cool, we've got a fuckton of data scraped
View attachment 219036
Let's analyze what interests us, music and the hashtags.
The top 50~ most frequently used sounds consist of 90% content we are interested in.
And the rest? - Not so much, turns out the sluts also just use whatever sounds are popular, well that's a bummer
Hashtags on the other hand are the real deal, we got at least 500 of hashtags that are primarily used only for adult-ish content.
Notes:
Is an 'accountant' some sort of a slang among younger generation?
About 50 tags are a variation of 'bikinni', I'll leave that one for your judgement.
Sound IDs are incremental, so we could theoretically always check the new sounds, BUT that also goes for any unpopular sound created by a random user.
Plans for the future -
When finally scraping users videos, get the sound IDs as well, so we can stay up to date with the newest trending sounds/tags in the niche.
Off to scraping those hashtags now!
Pretty much same as before, just with some improvements.
Thankfully when scraping posts from hashtags it shows you some data about the user, like post count, and user avatar, so we can skip the users with less than 40 videos uploaded AND we can fetch only the users avatar and guess it's gender with some le'pithon . So we don't need to scrape each users posts individually to decide whether he's/she's hot AND the gender. Saving some requests and traffic, who doesn't like that?
Then the other script takes only females, downloads her video thumbnails and guesses how NSFW the content is.
Notes:
Video thumbnail urls have an expiration token, video thumbnail - 7 days, but user avatar is much shorter. Like 1 day or something don't have it written down, but it's pretty short.
View attachment 219037
A sudden self diagnosis of retardation.
DING DONG
So we are looking aaaalll over the place for NSFW tiktok accounts, and 90% of those accounts are doing OF
And it just so happens that you can actually have a link to your tiktok RIGHT IN YOUR DESCRIPTION
View attachment 219038
Who could have thought that it could be so easy?
Definitely not fucking me.
What does that mean to us?
That's right - more scraping
Not going to get too much in to details of it, but I'm no specialist with OF, and AFAIK it does not allow you to search for users, so I used one of many available search engines.
Ba da beem ba da bow we've got ourselves a hefty list of OF models usernames.
Try to grab the tiktok urls from OF description - quite low percentage of girls have it there, only the advanced bitches with pimps from bhw do. (that's a business opportunity for you right here)
Try to match the usernames on OF to usernames on TT - no dice, very low accuracy and many false positives.
But know what most of them do have?
A link with a wall of all their other links, not sure how it's called, but here's the services ( and for the love of god BHW I'm not promoting these 'services' or selling anything)
allmylinks.com/username
linktr.ee/username
my.bio/username
So what we can do is - bruteforcing all of the above shortners, pretty simple stuff, just take {usernameOnOF} and make a request to all 3 shortners to see if there's a link to tiktok, and grab it.
View attachment 219039
That gets us a couple thousands accounts more.
That still does not satisfy our needs.
Those 50 page 'self improvement' audiobooks my brain has ingested while sleeping start kicking in..
...Think about why...
...Think about what...
So I slow down a bit and think why am I doing this.
To get the fresh NSFWish content from tiktok
But tiktok doesn't show the newest posts from hashtags like instagram does, or does it?
I do what I do best - a google search.
View attachment 219041
One of those 'how to basic' videos pops up, showing the 'filter by date' working on the mobile app.
My exact reaction to that-
https://www.tiktok.com/@_holubrichard_/video/7106897609121336582
We're reverse engineering tiktok now. I guess
So buckle the fuck up
Artillery- memu,mitmproxy,frida
We're in
View attachment 219042
Spent way longer than I'd wish to admit, fiddling with the request, trying to replicate it but I had to admit that's out of my scope of knowledge.
Googling a bit about the x-gorgon headers only lead me to a few github repositories that both haven't been updated in 2 years~ , both of them claimed being able to generate the gorgon headers for the chinese tt alternative "douyin".
If anyone has any info on that - I'm all ears.
Notes:
If you think whether or not tiktok is tracking your X - the answer is yes. Yes they are.
A couple of hints: timezone, devices uptime, SIM cards MCC,MNC and phone number.
If we do everything properly we can scrape the data without being logged in, just what we wanted!
![]()
How it feels to tail -f in windows
View attachment 219044
Notes:
Sometimes on the first start the app likes to crash, just clean the applications data and it's working again!
Of course, stability is an issue with emulators, thank god the recent project I worked with is all about emulators, so it was rather easy to set it up properly and get it working on autopilot.
After some time the IP get's limited, after about 50~ hashtags scraped, just reset the machine, change the proxy IP and you're good to go.
P.s when using mitm as a proxy you can specify --mode upstream:IPORT - and the traffic will go out through the supplied proxy.
Cons of this method - I am only able to run 1 emulator at a time, because frida can only connect to one server AFAIK? If you know to specify emulator in frida, or have a tiktoks apk with ssl pinning patched lemme know, it would speed up the operation drastically!
View attachment 219045
So yeah that's like 4 days of work crammed up in to one post, tried to remember all the interesting bits and pieces, hope the memez helped reading it.
If someone want's to play around with those requests, or needs some of the data just ask. IT IS FREE . NOT FOR SALE chill bhw.
Sayonara
Yeah, sometimes you really wish you had brainstormed before doing a ton of work, but that's just how I work I guess, just sitting there and thinking ideas don't come. They come in the progress of doing something.That's amazing!!! Thanks for the update!
The TikTok links on the OF page is genius and so obvious in retrospect lol. Hilarious also that the app itself just lets you filter by date.
So now that you got all the scraping done, what's the next step?
ffmpeg to join the vids together?
![B8NIH9D[1].png B8NIH9D[1].png](https://www.blackhatworld.com/data/attachments/541/541518-ceade8f2038500482d59068938f756da.jpg?hash=zq3o8gOFAE)
In my opinion 30-60sFinally, 2:30AM the scraping setup is done!
Btw, how long do you guys think the videos should be 10s, 15s, 60s?



I also went that route of scraping hashtags at first, but the thing is - the newest videos are not at the top as it is with instagram, so to get a reasonable number of posts we have to filter by the newest ones.This is a quiet complicated setup haha. I created a simple browser macro that scroll thro a specific hashtag and gather all the links of the vids save them in a file and download them.
If you would like to find active onlyfans accounts with link in their description use this dork: site:Onlyfans.com info:Last seen Today contains:linktree
Publishing babes vids on shorts is a nightmare, i had one video goes viral and every next upload is just few views to none on multiple accounts.
Also, I see you mixing two vids in one without adding changes to them which as far of my knowledge abt youtube algo can easily read it as an compilation video and distinguish each of the two clips used to identify them separately which could lead to a detection of spam pattern if those clips are been used repetitively.
Just keep in mind Shorts algo works in an unpredictable way.
Good luck!
Oh i see! you need newest videos. Scraping vids under hashtags works for me since i need viral vids that proven to be effective so i get a higher chance the shorts algo pick-it up.I also went that route of scraping hashtags at first, but the thing is - the newest videos are not at the top as it is with instagram, so to get a reasonable number of posts we have to filter by the newest ones.
Thanks for the dork idea, haven't thought about that!
Yes, the videos are getting combined, but that's why we have to scrape so many videos from tiktok, because no video is getting put in to the complication twice, so basically 2 tiktok videos = 1 YT short, but yeah it's definitely strange how the algo works![]()