Botting a vote system

alex5996

Junior Member
Joined
Nov 18, 2015
Messages
109
Reaction score
18
I have a webpage with a voting script for a contest. To enable voting, you must first select the name of a character from three possible choices. This name is chosen based on an image displayed in the center of the page, showing the character in question. After selecting the character, you click the "VOTE" button, the page reloads, and it displays "Thank you for voting!" while the vote is added to the count. The character displayed is random.

Now, if I change my IP and reload the page, the vote is counted without requiring the character selection step again. This means I can change my IP multiple times and add multiple votes using macros on a smartphone, for example.

Suppose I want to use a proxy system to visit the page and vote automatically at a rapid pace. In that case, the problem is that the character verification process would appear. How can I bypass this? Any ideas for creating a bot or simply generating a special link that allows bypassing the vote verification by reloading the cookies that indicate the verification step has already been completed?

To clarify: when I reload the page after changing my IP on a smartphone, the browser asks me if I want to "Reuse information you previously entered. Returning to this page may repeat any actions you performed." I imagine it’s possible to recreate this condition.

Note: The voting mechanism uses the POST method, not GET, for data submission.

Initially i thouht that maybe i should be able to make a clickable link that replicates the request and send it to a WEBSITE traffic provider but i'm starting to think that it's not possible..
 
what kind of verification appears ?

can u also post the link?
 
I have a webpage with a voting script for a contest. To enable voting, you must first select the name of a character from three possible choices. This name is chosen based on an image displayed in the center of the page, showing the character in question. After selecting the character, you click the "VOTE" button, the page reloads, and it displays "Thank you for voting!" while the vote is added to the count. The character displayed is random.

Now, if I change my IP and reload the page, the vote is counted without requiring the character selection step again. This means I can change my IP multiple times and add multiple votes using macros on a smartphone, for example.

Suppose I want to use a proxy system to visit the page and vote automatically at a rapid pace. In that case, the problem is that the character verification process would appear. How can I bypass this? Any ideas for creating a bot or simply generating a special link that allows bypassing the vote verification by reloading the cookies that indicate the verification step has already been completed?

To clarify: when I reload the page after changing my IP on a smartphone, the browser asks me if I want to "Reuse information you previously entered. Returning to this page may repeat any actions you performed." I imagine it’s possible to recreate this condition.

Note: The voting mechanism uses the POST method, not GET, for data submission.

Initially i thouht that maybe i should be able to make a clickable link that replicates the request and send it to a WEBSITE traffic provider but i'm starting to think that it's not possible..
Have you checked to see if anything is being saved in localStorage, sessionStorage, cookies, etc? Are you able to see what data is in the POST request and are you able to re-create it automatically (eg what is in the request body - you can see this in the network tab)
 
Back
Top