Cracking Paypal

Status
Not open for further replies.
Good stuff, will save a few bucks with this.

I'm really surprised paypal has this simple loophole.
 
Last edited:
lot's of good stuff here

Code:
http://www.thehomeinternetbusiness.com/50/qwkl.php?sc=85819823974123

the link only works if you copy and paste it
 
it works for idiots who don't know how to secure their shit lol.
 
OK - all you guys who have found products this works with will share your pirate booty in the Member's Download section in the next couple of days....RIGHT?

Thanks!
 
yeah share your treasures ;)
 
there's lots of scam type stuff set up as paypal DLs, love to scam the scammers, and find out if they have any good info or not.
 
From what i've read this is pretty old and anything of value has been secured so that this wont work... Guys we were too late...
 
works charm, thank's..
download download download..
 
I was doing this manually quite some time back. They no longer use the return value it is now a successful checkout value and it is not coded into the button/link anymore.

This still works with older buy it now links but not with the new stuff.
 
Bladdy hell this is a real super hack, too much shit to mention. I could be downloading for weeks.
 
Lol this is not a hack. You are not cracking paypal. If the site were to actually VERIFY the payment at the thanks.php script through IPN, you will be stopped instantly.

The following piss poor script attempts to "obfuscate" the form fields. When it's all done and decoded writes the form fields to the document:

--
<script language=javascript>s="a3Ca73~70B61B6EF20c6Fa6Ec63D6Fa6ED74a65~78a74B6D-65c6E.75c3DF22~72.65c74a75c72D6EB20~66B61D6Ca73~65B3B.22-20D6F~6E~64a72a61a67e73a74e61a72.74F3D.22.72e65B74F75e72-6EF20-66B61F6CB73a65.22D3B~3Ee3Ce66-6FF72c6Da20.61-63.74.69a6Fa6E-3D.22e68~74F74B70a73F3AB2F~2Fa77B77e77-2Ea70a61B79a70e61D6CB2Ea63F6F.6D.2Fa63a67a69a2D.62~69c6EF2FD77.65D62c73~63~72a22a20a6Da65a74F68B6Fe64B3Dc22~70c6Fc73F74F22-3Ec20D3CB69.6E.70e75.74D20e74e79~70F65a3DD22D68a69a64e64F65a6E-22~20F6E-61B6D.65.3DD22F63a6DB64-22c20a76-61c6Ca75a65~3De22F5Fa78F63a6Cc69-63e6Bc22D3E-3Cc69c6ED70a75~74.20a74-79D70a65~3DD22B68~69e64a64F65-6Ee22c20D6EB61a6DF65-3DF22F62e75a73.69a6EB65~73.73D22-20a76a61a6Ca75c65c3Dc22a6FD72e64D65F72~73e40B69c6Ee65~74F67B61F6Ce61~78c79c2EF63.6FD6DB22F3E~3C.69-6Ea70.75B74B20.74D79-70a65a3DB22~68c69~64.64-65B6Ec22~20a6EB61a6De65D3Da22a69.74c65c6De5FB6Ea61B6Da65.22c20.76F61e6C~75a65B3D~22F41a64a73a65D6ED73a65a20e54.72e61B63~6Ba65D72a22c3EF3CB69~6Ee70D75a74-20a74a79a70a65~3D-22a68B69.64-64D65a6Ee22~20-6Ee61F6D-65.3D.22~69-74.65.6Da5Fc6Ec75a6D.62B65~72-22a20~76-61D6CF75c65D3D.22F41c54F34e31-30a22-3Ea3CF69c6Ee70F75~74F20-74D79D70-65B3Da22D68F69.64a64F65~6ED22a20F6Ea61-6D.65~3DD22a61B6De6F~75a6ED74-22~20~76.61-6CB75a65F3D~22a34a37~22e3ED20D3Ca69.6E~70a75e74.20B74D79D70e65.3D.22c68a69F64B64a65D6EB22a20F6E~61c6Dc65D3D-22.72D65a74~75B72a6Ec22~20~76D61B6CD75c65F3DD22F68.74~74D70e3AF2Fc2FB61D64.73F65a6E-73a65c74~72D61e63~6BF65D72e2Ea69-6ED66a6Fc2FF6E~6FD31a6CD6Fa6Fc6BF2F~74~68a6Ea78.2EB70c68B70a22-3EF3Ca69F6Ea70F75e74.20a74~79~70F65D3D.22.68a69c64-64e65~6E.22B20e6Ea61c6Dc65D3De22-63F61.6E-63c65a6CD5FB72-65B74c75a72e6Ee22e20B76a61D6C-75e65e3Dc22c68.74-74F70e3Ae2F-2FB61a64-73D65-6EB73~65a74D72a61-63c6B.65~72~2Ec63F6FB6D~22a3Ec3CD69a6E-70a75a74a20a74F79B70~65a3DF22D69D6De61a67-65c22-20B73.72~63D3De22B68.74c74D70D3A-2Fc2Fe61.64D73a65c6ED73D65c74D72a61a63-6Be65D72~2E~63e6FD6DB2F~69e6DB61F67~65B73F2Fa62D75~74~74B6F-6EF2E.67B69-66B22D20c62~6FF72a64D65B72D3De22B30e22F20c6Ee61.6D.65a3D-22D73.75e62e6De69.74~22e20F61~6CD74a3D-22a4D.61-6BB65F20-70.61a79a6Dc65~6EB74-73e20-77.69c74a68a20F50.61D79e50.61-6CB20a2Da20-69a74c27a73D20D66a61c73B74B2Ca20B66~72B65c65e20a61B6Ec64a20.73D65a63.75e72D65.21a22a3EB3Ce69~6EF70B75~74D20D74a79F70F65D3DB22e68c69a64~64e65~6Ea22F20F6E~61c6D~65~3D-22a6EB6Fe5F.73.68D69c70a70~69D6Ea67-22F20e76a61D6Ca75F65a3Da22a31c22F3ED3Ce69c6EF70D75a74.20-74B79~70D65.3D-22D68a69.64a64e65F6E~22F20.6Ec61F6D~65B3DB22a75c6Ea64c65~66a69a6E~65c64a5FB71D75-61D6Ea74a69F74c79c22e20~76~61a6C.75.65F3Da22c30B22-3ED3CB69B6Ea70~75~74a20a74e79B70F65e3De22D68.69a64.64B65a6E~22~20a6EB61~6DF65a3DD22D63D6E.22~20D76~61e6Ca75~65e3Dc22-22-3Ee3CF69c6Ea70a75-74e20-74B79D70F65D3Da22a68.69a64~64B65e6Ea22F20F6E-61-6DB65a3DB22a63-73-22~20a76e61B6CF75e65c3Dc22.30a22F3E~3Ca2Fc66-6FD72D6D.3Ea3CF2F~73B70a61-6E~3E";c="74323D22223B666F722869323D303B69323C732E6C656E6774683B69322B2B297B696628693225333D3D302974322B3D2225223B656C73652074322B3D732E636861724174286932293B7D646F63756D656E742E777269746528756E65736361706528743229293B74323D22223B";eval(unescape("%74%3D%22%22%3B%66%6F%72%28%69%3D%30%3B%69%3C%63%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%7B%69%66%28%69%25%32%3D%3D%30%29%74%2B%3D%22%25%22%3B%74%2B%3D%63%2E%63%68%61%72%41%74%28%69%29%3B%7D%65%76%61%6C%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%74%3D%22%22%3B"));</script>
--
Praticularly the section

---
eval(unescape("%74%3D%22%22%3B%66%6F%72%28%69%3D%30%3B%69%3C%63%2E%6C%65%6E%67%74%68%3B%69%2B%2B%29%7B%69%66%28%69%25%32%3D%3D%30%29%74%2B%3D%22%25%22%3B%74%2B%3D%63%2E%63%68%61%72%41%74%28%69%29%3B%7D%65%76%61%6C%28%75%6E%65%73%63%61%70%65%28%74%29%29%3B%74%3D%22%22%3B"));
--

The above simply evaluates to:

for(i=0;i<c.length;i++){if(i%2==0)t+="%";t+=c.charAt(i);}eval(unescape(t));t="";
The above decodes variables c and s and prints the form to the screen. I never knew webmasters were this fucking stupid
 
thanks http://www.blackhatworld.com/blackhat-seo/members/140282-cookie-monster.html for the explanation, now i will download stuff smartly knowing how this miracle happens :)
 
For ebook authors, when you use the keyword "ebook cover" you can find some nice stuff to create ebook covers, free to download :)
 
Status
Not open for further replies.
Back
Top