Alternative to multilogin automation
- Thread starter Vermeno
- Start date
treyallover
Registered Member
- May 26, 2019
- 50
- 20
ATuringtest
Elite Member
- Mar 8, 2019
- 1,625
- 2,848
Sure Tiny7 or Tiny10 on hyper-v or vm workstation I use them all the time.
ATuringtest
Elite Member
- Mar 8, 2019
- 1,625
- 2,848
Before anyone PM's me here's some links to help you create stealth VM's
Awesome tutorial for setting up hardware profiles : EVEPILOT
look under farming + theres a tool for auto starting VM's and timer VMManager
WIndows 10 lite DL on Sourceforge
Awesome tutorial for setting up hardware profiles : EVEPILOT
look under farming + theres a tool for auto starting VM's and timer VMManager
WIndows 10 lite DL on Sourceforge
ConnectionSphere
Power Member
- Jun 14, 2013
- 588
- 230
Just did. Here is the results.
Here is the screenshot when I visit such website from Google Chrome with no proxies.
Something strange is that the fingerprints of my chrome browser are well known by LinkedIn.
(I tried to login from my chrome a LinkedIn profile that were working fine with Multilogin, and such profile was blocked immediately).
I think that this service may access a database of burned fingeprints.
Here is the screenshot when I access the site from Firefox, with no proxy (I have no idea what ZennoPoster is):
Here is the screenshot when I visit the site using Multilogin (I waited it for minutes, and it didn't give me any result):
dustinallen0071
BANNED
- Mar 28, 2015
- 291
- 46
I DON'T think there is alternative
ATuringtest
Elite Member
- Mar 8, 2019
- 1,625
- 2,848
treyallover
Registered Member
- May 26, 2019
- 50
- 20
As I understand it, with EXbrowser you have to manually enter your xpaths or elements. Terribly inefficient. ZP, BAS, and botchief all have this functionality built in where in "recorder" mode you click on a field and the xpath is automatically selected.
This issue with most of these frameworks still exists where they use their own version of chromium or firefox. This is detected in some cases (deviceinfo.me, etc).
The best way to automate undetected is still automating the windows desktop itself (autoIT, macro recorder, etc), but the problem becomes scaling.
BottingRocks
BANNED
- Mar 3, 2020
- 9
- 11
The problem with these sort of tools is that you are only thinking about the browser fingerprints like the hardware, navigator, codecs etc. Multilogin does not implement their own ssl ciphers so if you compare the ciphers a normal modern chrome browser outputs during the handshake versus Multilogin then you can clearly see is not a real browser.
You won't be able to fool sites protected by akamai for long using Multilogin, this piece of software is essentially snake oil. Nothing that puppeteer can't do and that is available free.
Now, if multilogin implemented their own ciphers that are available in Firefox, Chrome, Opera and switched them automatically, when set to mimic that browser then now we can say Multilogin is doing it's job.
The real sites that are worth botting can easily detect Multilogin and it's only the gullible non-techy people that believe this software is going to save them from being caught botting.
You won't be able to fool sites protected by akamai for long using Multilogin, this piece of software is essentially snake oil. Nothing that puppeteer can't do and that is available free.
Now, if multilogin implemented their own ciphers that are available in Firefox, Chrome, Opera and switched them automatically, when set to mimic that browser then now we can say Multilogin is doing it's job.
The real sites that are worth botting can easily detect Multilogin and it's only the gullible non-techy people that believe this software is going to save them from being caught botting.
treyallover
Registered Member
- May 26, 2019
- 50
- 20
I'm interested in learning more about this. Do you have any links regarding these detections?
BottingRocks
BANNED
- Mar 3, 2020
- 9
- 11
I can't post links right now but search on google: ssl tls passive fingerprint akamai
There is tons of information on the subject. The sneaker dev community is where you can learn more about that since they are always fucking with Akamai, Perimeterx, Pooky etc.
I could technically further deobfuscate the script on : http://anonymity.space/js/security/mickeymouse.js but I don't have time as I'm working on Pooky and Perimeterx, but you can easily spot that this script checks for Multilogin fingerprints. Plus, puppeteer is free and open source and tons of people are using it to create bots with it.
Just do a search on : matchMultiloginApp
You have to be straight retarded to be buying Multilogin app. Seriously, just use puppeteer extra stealth, the same shit they do is the same thing Multilogin does plus more.
micpitt
Regular Member
- Apr 7, 2014
- 222
- 70
Is there any way we can replicate what vultr.com does? on a home server.
Like there is a 64 GB RAM server in my home and we can give a command to it to make 5 4GB RAM virtual machine with windows installed in it.
All those machines will have different fingerprints.
Like there is a 64 GB RAM server in my home and we can give a command to it to make 5 4GB RAM virtual machine with windows installed in it.
All those machines will have different fingerprints.
BottingRocks
BANNED
- Mar 3, 2020
- 9
- 11
The problem with that setup is that you are still getting the same hardware signatures on each new installation. You have to attack the problem at the application level, like spoof the browser or something.
You can't just installed vms on a server and hope to get unique windows fingerprints every time. Unless you hook into to operating system to give you different values whenever a hardware property is being used in a fingerprint.
But from just pure raw installations you won't be able to get different fingerprints.
michiosha1
Junior Member
- Mar 26, 2019
- 129
- 40
Maybe try KVM on linux host? This way you can have a lot of VMs with randomized HW UUIDs.
Brian Alexander
Regular Member
- Aug 12, 2016
- 454
- 317
Just thought I'd put my two cents in here since this is a fairly important topic.
I've been automating for the last decade and I STRONGLY recommend you to stay as far as you can away from MultiLogin.
I've used them for a few years, so I have a fair amount of experience with them.
MultiLogin is easily detected by most, if not all, anti-bot detection services that exists nowadays. They update at an absurd slow rate which means that every time they get detected it will take ~6-12 months before they patch it (historically speaking).
If you boot up a browser session you will consistently get 0.1 scores from Recaptcha v3, regardless of your proxy - you might as well use Tor at this point.
They offer a chrome build called "Mimic". Google Chrome is automatically updated nowadays, so it's very rare that a legitimate user will have a version from weeks ago. However, the user agents (and builds) that MultiLogin uses consists of versions that go back from 3-6 months.
NO LEGITIMATE USER would ever use these user agents (you'd have to keep your browser & computer on for 6 months while ignoring every single update notification - nobody does that).
A quick note about their Selenium/Puppeteer (Automation) solution: It straight up does not save 4 out of 5 sessions and Automation users are forced to work with even more outdated builds that are even more detectable.
Alternatives:
If you have know-how then I recommend you create your own custom Chromium build, spoofing all fingerprinting endpoints. This is difficult but that's what I did. Once I have warmed up a session, I get 0.9 scores.
Otherwise I suggest you to use either Ubot or Zennoposter. To be fair, I haven't used them for a few years but I checked out their builds through a trial account prior to making this post and they handle fingerprint protection WAY BETTER than MultiLogin.
Vmware/Emulators can also work just fine.
Hope you found my post useful.
I agree with most of the points "BottingRocks" made as well. For some reason he's banned which is rather sad since he had some insightful thoughts.
I've been automating for the last decade and I STRONGLY recommend you to stay as far as you can away from MultiLogin.
I've used them for a few years, so I have a fair amount of experience with them.
MultiLogin is easily detected by most, if not all, anti-bot detection services that exists nowadays. They update at an absurd slow rate which means that every time they get detected it will take ~6-12 months before they patch it (historically speaking).
If you boot up a browser session you will consistently get 0.1 scores from Recaptcha v3, regardless of your proxy - you might as well use Tor at this point.
They offer a chrome build called "Mimic". Google Chrome is automatically updated nowadays, so it's very rare that a legitimate user will have a version from weeks ago. However, the user agents (and builds) that MultiLogin uses consists of versions that go back from 3-6 months.
NO LEGITIMATE USER would ever use these user agents (you'd have to keep your browser & computer on for 6 months while ignoring every single update notification - nobody does that).
A quick note about their Selenium/Puppeteer (Automation) solution: It straight up does not save 4 out of 5 sessions and Automation users are forced to work with even more outdated builds that are even more detectable.
Alternatives:
If you have know-how then I recommend you create your own custom Chromium build, spoofing all fingerprinting endpoints. This is difficult but that's what I did. Once I have warmed up a session, I get 0.9 scores.
Otherwise I suggest you to use either Ubot or Zennoposter. To be fair, I haven't used them for a few years but I checked out their builds through a trial account prior to making this post and they handle fingerprint protection WAY BETTER than MultiLogin.
Vmware/Emulators can also work just fine.
Hope you found my post useful.
I agree with most of the points "BottingRocks" made as well. For some reason he's banned which is rather sad since he had some insightful thoughts.
Last edited:
USA282
Senior Member
- Dec 18, 2016
- 917
- 784
Any thoughts about sessionbox workstation?
Brian Alexander
Regular Member
- Aug 12, 2016
- 454
- 317
I've never tried them so can't really comment on them.
However, they mention "Prevent Evercookie/Supercookie tracking" as one of their features which makes me think they aren't exactly the most up to date solution.
FNTK
Power Member
- Apr 7, 2014
- 770
- 354
The URL in your sig is wrong.
Rpbizcorp
Registered Member
- Jul 15, 2020
- 68
- 21
Okay so im very very new to 'botting' but get the jist of fingerprinting, anyone heard of linkensphere? Also theres something called antidetect (there are a few but this one is a vm with cool features like mac address changer along with other variables) like i said im new here so correct me if im wrong. Also what would be the best way to create a load of social media accounts without getting fingered? Newb question for you guys but hey we all have to start somewhere, looking forward to your insights (love this place btw, its so addictive its got me off drugs lol)