1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

black hat method.

Discussion in 'BlackHat Lounge' started by sergbot, Aug 2, 2011.

  1. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    anyway, i really need help, i never did anything like this so im asking you guys.

    basically there is a website, where you have to click 4 buttons, and then wait 60 seconds and click the final button. this is where you get a code.

    i need to write a php script that will use a proxy list and will mimic a php form being sent so it will get to the code immediately and then will save all the codes in php file.

    this is the page im talking about [​IMG]

    and this is where its located on the web, for those who need to use it

    http://199.59.163.134/vote/vote.php

    does anyone know how to do any of this?

    thank you in advance, i love you all.
     
    Last edited: Aug 2, 2011
  2. Narrator

    Narrator Power Member

    Joined:
    Oct 5, 2010
    Messages:
    507
    Likes Received:
    396
    Occupation:
    Internet Marketing
    Location:
    /dev/null
    I was bored so here's a start. I am posting this just as an example. I don't support the use of cheating scripts, the voting buttons are there for a reason.
    PHP:
    <?
    $proxy='127.0.0.1:8800'//your proxy here, you could write a script to load from file

    $ch curl_init();
    curl_setopt($chCURLOPT_URL'http://199.59.163.134/vote/vote.php'); //url of page
    curl_setopt($chCURLOPT_HEADER1);
    curl_setopt($chCURLOPT_RETURNTRANSFER1);
    curl_setopt($chCURLOPT_HTTPPROXYTUNNEL1);
    curl_setopt($chCURLOPT_PROXY$proxy);
    //curl_setopt($ch, CURLOPT_PROXYUSERPWD, 'user:password');
    curl_setopt($ch,CURLOPT_POST,2);
    curl_setopt($ch,CURLOPT_POSTFIELDS,'confirm=true&voteid=');  //really only one form field for validation

    $result curl_exec($ch);
    curl_close($ch);

    preg_match_all('/auth-(.*?) /',$result,$matches);
    $code=$matches[1][1];
    echo 
    $code//there's your code you could add it to DB etc..
    ?>
    You could modify it to load proxies from a file.

    Cheers!
     
    • Thanks Thanks x 1
    Last edited: Aug 2, 2011
  3. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    lol okay, im gonna start by thanking, and giving u thanx + rep lol. im trying 2 understand the script. did you rip this off? or did u write this? im impressed.

    anyway.

    how does the script go to the final page? i saw some variables, do you need to specifically get the variables? because i know of a copy of this voting pages source floating around.
     
  4. facebookdude

    facebookdude Elite Member

    Joined:
    Feb 28, 2010
    Messages:
    1,506
    Likes Received:
    2,489
    Next time you're bored hit me up, I got some jobs for you haha :)
     
    • Thanks Thanks x 1
  5. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    when i grow up i wanna be like him

    damn i got 8 months 2 be like him -.- why cruel world, why did i sit on my ass and do nothing all my life
     
  6. Narrator

    Narrator Power Member

    Joined:
    Oct 5, 2010
    Messages:
    507
    Likes Received:
    396
    Occupation:
    Internet Marketing
    Location:
    /dev/null
    There was a couple of variables that it checks when you vote setVoteStatus(a) voteTimer() but they just keep the page from submitting the form (document.forms.voted.submit()). So the script I set up for you, skips all that and just submits the form.

    Just an example of why all validation should be done server side not client.
     
    • Thanks Thanks x 1
  7. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    confused. spoon feed plz
     
  8. Narrator

    Narrator Power Member

    Joined:
    Oct 5, 2010
    Messages:
    507
    Likes Received:
    396
    Occupation:
    Internet Marketing
    Location:
    /dev/null
    Use phpinfo() to make sure curl is installed/enabled.
     
    • Thanks Thanks x 1
  9. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    yeah i did so it works now. but now im getting
    Code:
    Notice: Undefined offset: 1 in C:\xampp\htdocs\code.php on line 18
    it seems that the result variable is empty.
     
    Last edited: Aug 3, 2011
  10. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
  11. Narrator

    Narrator Power Member

    Joined:
    Oct 5, 2010
    Messages:
    507
    Likes Received:
    396
    Occupation:
    Internet Marketing
    Location:
    /dev/null
    The array must be empty, try to comment out the preg_match and the array and just print_r($result) to see if the page is correct.

    The vote script checks if port 80 is open to avoid public proxies. So that could be a problem.

    If the page is correct print_r($matches) to see preg_match is finding the result.

    Good luck!
     
  12. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    fuck ya, shit works lol.

    im gonna rep u a few more times lol.

    also.

    now i need proxy lists >.>
     
  13. sergbot

    sergbot Junior Member

    Joined:
    Jan 20, 2010
    Messages:
    171
    Likes Received:
    23
    it works but for 1/10 proxies