gmail curl creation

Discussion in 'Black Hat SEO' started by xboxlive, Jun 25, 2009.

  1. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I am working on a curl script to create gmail accounts and got past the sms verification by waiting a minute or so before submitting the initial form.

    Now however, gmail's little issue of requiring 3-5 captchas has me confused. My script will keep retrying forever and it will not make an account and keep saying to re-enter my password and enter the new captcha image.

    But if i write the html page to a file and open it up in a browser and retry the captchas manually it will create the account usually after 2-3 tries.

    I cannot figure out how gmail is determining the dif between firefox and curl at this step. I have looked at the headers and I emulate exactly what firefox is sending by looking at live http headers, and javascript is disabled.

    Has anyone encountered this and know the problem/fix?
     
  2. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I dont think you understand bro, I can create gmails manually in my browser just fine with only about 3-5 captcha being required. But if I use a script it will retry the captcha all day (decaptcher) and it will not create an account. I have even used other people's scripts and they do the same thing and was wondering why this would be when I can create them from the same computer and ip manually in a browser.
     
  3. dor@tehexploa

    [email protected] Registered Member

    Joined:
    Apr 25, 2009
    Messages:
    95
    Likes Received:
    25
    Sometimes LiveHTTPHeaders doesn't include everything. What I did was use a traffic analyzer like Wireshark which showed that an extra header was being sent when using cURL.
    Whenever you send a POST that has content-length greater than 1,025 cURL includes an Expect header.
    To ensure that it doesn't use the Expect header just use the following code:
    Code:
    curl_setopt($process, CURLOPT_HTTPHEADER, array('Expect:'));
    
    Hope this helps. Cheers.
     
  4. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    Yes i was already using that "Expect:" header in curl options, plus wireshark does not help if connection is https
     
  5. dor@tehexploa

    [email protected] Registered Member

    Joined:
    Apr 25, 2009
    Messages:
    95
    Likes Received:
    25
    Dang thought maybe you had overlooked the Expect: header like I had. What I did to analyze the headers without worrying about SSL was posting my form to a random page like www.example.com and seen what it did.

    Sorry I couldn't help though.
     
  6. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    I do not know about emulating the ajax calls because as ive mentioned i can disabled javascript in firefox and create an account just fine.
     
  7. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    i have disabled images in firefox as well xD

    how are other people having no problems creating 100k's gmails per day?
     
  8. xboxlive

    xboxlive Registered Member

    Joined:
    Oct 9, 2008
    Messages:
    60
    Likes Received:
    15
    well i remember trying to create a script some time back and having this same problem but thought i would try making a new script. things might have changed but i have tried minutes ago and can make gmails fine manually in firefox but i cannot understand why a curl script with everything i can think of being set correctly will not work. I am setting referer correctly too, saving the last url fetched.

    i have created twitter scripts, craigslist scripts, etc with no problem why is gmail so different?