1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

gmail curl creation

Discussion in 'Black Hat SEO' started by xboxlive, Jun 25, 2009.

  1. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I am working on a curl script to create gmail accounts and got past the sms verification by waiting a minute or so before submitting the initial form.

    Now however, gmail's little issue of requiring 3-5 captchas has me confused. My script will keep retrying forever and it will not make an account and keep saying to re-enter my password and enter the new captcha image.

    But if i write the html page to a file and open it up in a browser and retry the captchas manually it will create the account usually after 2-3 tries.

    I cannot figure out how gmail is determining the dif between firefox and curl at this step. I have looked at the headers and I emulate exactly what firefox is sending by looking at live http headers, and javascript is disabled.

    Has anyone encountered this and know the problem/fix?
     
  2. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I dont think you understand bro, I can create gmails manually in my browser just fine with only about 3-5 captcha being required. But if I use a script it will retry the captcha all day (decaptcher) and it will not create an account. I have even used other people's scripts and they do the same thing and was wondering why this would be when I can create them from the same computer and ip manually in a browser.
     
  3. dor@tehexploa

    dor@tehexploa Registered Member

    Joined:
    Apr 25, 2009
    Messages:
    95
    Likes Received:
    25
    Sometimes LiveHTTPHeaders doesn't include everything. What I did was use a traffic analyzer like Wireshark which showed that an extra header was being sent when using cURL.
    Whenever you send a POST that has content-length greater than 1,025 cURL includes an Expect header.
    To ensure that it doesn't use the Expect header just use the following code:
    Code:
    curl_setopt($process, CURLOPT_HTTPHEADER, array('Expect:'));
    
    Hope this helps. Cheers.
     
  4. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    Yes i was already using that "Expect:" header in curl options, plus wireshark does not help if connection is https
     
  5. dor@tehexploa

    dor@tehexploa Registered Member

    Joined:
    Apr 25, 2009
    Messages:
    95
    Likes Received:
    25
    Dang thought maybe you had overlooked the Expect: header like I had. What I did to analyze the headers without worrying about SSL was posting my form to a random page like www.example.com and seen what it did.

    Sorry I couldn't help though.
     
  6. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I do not know about emulating the ajax calls because as ive mentioned i can disabled javascript in firefox and create an account just fine.
     
  7. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    i have disabled images in firefox as well xD

    how are other people having no problems creating 100k's gmails per day?
     
  8. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    well i remember trying to create a script some time back and having this same problem but thought i would try making a new script. things might have changed but i have tried minutes ago and can make gmails fine manually in firefox but i cannot understand why a curl script with everything i can think of being set correctly will not work. I am setting referer correctly too, saving the last url fetched.

    i have created twitter scripts, craigslist scripts, etc with no problem why is gmail so different?