1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Any javascript expert please help me figure out how google generate ktl/bgresponse key?

Discussion in 'General Programming Chat' started by DreamBigWorkHard, May 26, 2013.

  1. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
  2. hatemachine

    hatemachine Regular Member

    Joined:
    Jan 14, 2011
    Messages:
    271
    Likes Received:
    1,138
    And why would anyone reveal that to you? How many public gmail account creators are there? Zero. That's because no one, or only some know how to generate those values. So you won't find anyone.
     
  3. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
    wow, this is encouraging?
     
  4. hatemachine

    hatemachine Regular Member

    Joined:
    Jan 14, 2011
    Messages:
    271
    Likes Received:
    1,138
    It's the truth, the earlier you accept it the less time you'll waste on it. So I just saved you many days, use a browser to automate it.
     
  5. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
    well, you know, browser's way too slow and clumsy?

    You think there's a chance some expert would give you some hints if you tell them you just want to build some web apps as great as gmail? Looks like people here dont want to reveal a single bit? i mean it wouldn't hurt if somebody can give some output just on the security's point of view?
     
  6. hatemachine

    hatemachine Regular Member

    Joined:
    Jan 14, 2011
    Messages:
    271
    Likes Received:
    1,138
    A slow account creator is still better than none at all. The KTL value is generated based on the user input, things like typing speed are being taken in consideration and more. Even then, there is the SMS verification which can still occur even on manually created accounts.
     
  7. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
    yeah, from my observation ktl is encoded by the input of several fields, and even backspace is captured as well, just dont know how they encode stuff. They didn't hide anything in the source though.
     
  8. indianbill007

    indianbill007 Jr. VIP Jr. VIP

    Joined:
    Jan 8, 2010
    Messages:
    4,813
    Likes Received:
    4,051
    Occupation:
    Making Money when the world is sleeping
    Location:
    Menlo Park - Next to Zuck
    They generate it with a js which is downloaded with the first http request you make.

    Your best bet would be to use a JS compiler or rendering engine which can compile and spit js output like a headless browser, if you dont want to go the browser automation route.

    Yes its possible to do without browser automation.

    Good luck, this is not a project for the faint hearted :)
     
  9. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
    Are you sure? Cuz i don't see any js request other than analytics or InputValidator or captcha request. Would you elaborate a bit more?
     
  10. indianbill007

    indianbill007 Jr. VIP Jr. VIP

    Joined:
    Jan 8, 2010
    Messages:
    4,813
    Likes Received:
    4,051
    Occupation:
    Making Money when the world is sleeping
    Location:
    Menlo Park - Next to Zuck
    I will tinker a bit tomorrow and let you know the exact js which does it. Only way to do it is via a js on the client site.
     
  11. DreamBigWorkHard

    DreamBigWorkHard Registered Member

    Joined:
    Nov 20, 2012
    Messages:
    92
    Likes Received:
    11
    Occupation:
    Daydreamer
    Nice. Can't wait to learn something new