OK - all you guys who have found products this works with will share your pirate booty in the Member's Download section in the next couple of days....RIGHT?
I was doing this manually quite some time back. They no longer use the return value it is now a successful checkout value and it is not coded into the button/link anymore.
This still works with older buy it now links but not with the new stuff.
Lol this is not a hack. You are not cracking paypal. If the site were to actually VERIFY the payment at the thanks.php script through IPN, you will be stopped instantly.
The following piss poor script attempts to "obfuscate" the form fields. When it's all done and decoded writes the form fields to the document:
--
<script language=javascript>s="a3Ca73~70B61B6EF20c6Fa6Ec63D6Fa6ED74a65~78a74B6D-65c6E.75c3DF22~72.65c74a75c72D6EB20~66B61D6Ca73~65B3B.22-20D6F~6E~64a72a61a67e73a74e61a72.74F3D.22.72e65B74F75e72-6EF20-66B61F6CB73a65.22D3B~3Ee3Ce66-6FF72c6Da20.61-63.74.69a6Fa6E-3D.22e68~74F74B70a73F3AB2F~2Fa77B77e77-2Ea70a61B79a70e61D6CB2Ea63F6F.6D.2Fa63a67a69a2D.62~69c6EF2FD77.65D62c73~63~72a22a20a6Da65a74F68B6Fe64B3Dc22~70c6Fc73F74F22-3Ec20D3CB69.6E.70e75.74D20e74e79~70F65a3DD22D68a69a64e64F65a6E-22~20F6E-61B6D.65.3DD22F63a6DB64-22c20a76-61c6Ca75a65~3De22F5Fa78F63a6Cc69-63e6Bc22D3E-3Cc69c6ED70a75~74.20a74-79D70a65~3DD22B68~69e64a64F65-6Ee22c20D6EB61a6DF65-3DF22F62e75a73.69a6EB65~73.73D22-20a76a61a6Ca75c65c3Dc22a6FD72e64D65F72~73e40B69c6Ee65~74F67B61F6Ce61~78c79c2EF63.6FD6DB22F3E~3C.69-6Ea70.75B74B20.74D79-70a65a3DB22~68c69~64.64-65B6Ec22~20a6EB61a6De65D3Da22a69.74c65c6De5FB6Ea61B6Da65.22c20.76F61e6C~75a65B3D~22F41a64a73a65D6ED73a65a20e54.72e61B63~6Ba65D72a22c3EF3CB69~6Ee70D75a74-20a74a79a70a65~3D-22a68B69.64-64D65a6Ee22~20-6Ee61F6D-65.3D.22~69-74.65.6Da5Fc6Ec75a6D.62B65~72-22a20~76-61D6CF75c65D3D.22F41c54F34e31-30a22-3Ea3CF69c6Ee70F75~74F20-74D79D70-65B3Da22D68F69.64a64F65~6ED22a20F6Ea61-6D.65~3DD22a61B6De6F~75a6ED74-22~20~76.61-6CB75a65F3D~22a34a37~22e3ED20D3Ca69.6E~70a75e74.20B74D79D70e65.3D.22c68a69F64B64a65D6EB22a20F6E~61c6Dc65D3D-22.72D65a74~75B72a6Ec22~20~76D61B6CD75c65F3DD22F68.74~74D70e3AF2Fc2FB61D64.73F65a6E-73a65c74~72D61e63~6BF65D72e2Ea69-6ED66a6Fc2FF6E~6FD31a6CD6Fa6Fc6BF2F~74~68a6Ea78.2EB70c68B70a22-3EF3Ca69F6Ea70F75e74.20a74~79~70F65D3D.22.68a69c64-64e65~6E.22B20e6Ea61c6Dc65D3De22-63F61.6E-63c65a6CD5FB72-65B74c75a72e6Ee22e20B76a61D6C-75e65e3Dc22c68.74-74F70e3Ae2F-2FB61a64-73D65-6EB73~65a74D72a61-63c6B.65~72~2Ec63F6FB6D~22a3Ec3CD69a6E-70a75a74a20a74F79B70~65a3DF22D69D6De61a67-65c22-20B73.72~63D3De22B68.74c74D70D3A-2Fc2Fe61.64D73a65c6ED73D65c74D72a61a63-6Be65D72~2E~63e6FD6DB2F~69e6DB61F67~65B73F2Fa62D75~74~74B6F-6EF2E.67B69-66B22D20c62~6FF72a64D65B72D3De22B30e22F20c6Ee61.6D.65a3D-22D73.75e62e6De69.74~22e20F61~6CD74a3D-22a4D.61-6BB65F20-70.61a79a6Dc65~6EB74-73e20-77.69c74a68a20F50.61D79e50.61-6CB20a2Da20-69a74c27a73D20D66a61c73B74B2Ca20B66~72B65c65e20a61B6Ec64a20.73D65a63.75e72D65.21a22a3EB3Ce69~6EF70B75~74D20D74a79F70F65D3DB22e68c69a64~64e65~6Ea22F20F6E~61c6D~65~3D-22a6EB6Fe5F.73.68D69c70a70~69D6Ea67-22F20e76a61D6Ca75F65a3Da22a31c22F3ED3Ce69c6EF70D75a74.20-74B79~70D65.3D-22D68a69.64a64e65F6E~22F20.6Ec61F6D~65B3DB22a75c6Ea64c65~66a69a6E~65c64a5FB71D75-61D6Ea74a69F74c79c22e20~76~61a6C.75.65F3Da22c30B22-3ED3CB69B6Ea70~75~74a20a74e79B70F65e3De22D68.69a64.64B65a6E~22~20a6EB61~6DF65a3DD22D63D6E.22~20D76~61e6Ca75~65e3Dc22-22-3Ee3CF69c6Ea70a75-74e20-74B79D70F65D3Da22a68.69a64~64B65e6Ea22F20F6E-61-6DB65a3DB22a63-73-22~20a76e61B6CF75e65c3Dc22.30a22F3E~3Ca2Fc66-6FD72D6D.3Ea3CF2F~73B70a61-6E~3E";c="74323D22223B666F722869323D303B69323C732E6C656E6774683B69322B2B297B696628693225333D3D302974322B3D2225223B656C73652074322B3D732E636861724174286932293B7D646F63756D656E742E777269746528756E65736361706528743229293B74323D22223B";eval(unescape("%74%3D%22%22%3B%66%6F%72%28%69%3D%30%3B%69%3C%63%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%7B%69%66%28%69%25%32%3D%3D%30%29%74%2B%3D%22%25%22%3B%74%2B%3D%63%2E%63%68%61%72%41%74%28%69%29%3B%7D%65%76%61%6C%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%74%3D%22%22%3B"));</script>
--
Praticularly the section
for(i=0;i<c.length;i++){if(i%2==0)t+="%";t+=c.charAt(i);}eval(unescape(t));t="";
The above decodes variables c and s and prints the form to the screen. I never knew webmasters were this fucking stupid
thanks http://www.blackhatworld.com/blackhat-seo/members/140282-cookie-monster.html for the explanation, now i will download stuff smartly knowing how this miracle happens
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.