Planning on making my own twitter bot.

ekuin0x

ekuin0x

Banned - selling outside of the marketplace.
Joined
Dec 28, 2023
Messages
123
Reaction score
130
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?
 
Advertise on BHW
Yes, you can automate account creation like anything else. Use IMAP to verify the email address programmatically, or an SMS library if you are verifying with phone. You will also need a captcha solving service. Speaking from my own experience building a TikTok registration bot.
 
puppeteer or playwright are better
use anti detect browser like gologin

for account creation headful mode is necessity unless the website you're working on doesn't have strict requirements

use database to save and retrieve data, sqllite will be better than other things as it's just a file that doesn't require auth if you set it so
 
  • Like
Reactions: AOT
gbiz123 said:
Yes, you can automate account creation like anything else. Use IMAP to verify the email address programmatically, or an SMS library if you are verifying with phone. You will also need a captcha solving service. Speaking from my own experience building a TikTok registration bot.
Click to expand...
Thank you that was helpful. May I ask about your experience in the field? is the automation-bots niche still profitable and what are the most successful methods to make profit?
 
Make your bot to simulate human actions as close as possible to stay under the radar...these days social networks use patters recognition with AI and you will get a lot of accounts banned if you don't do it the right way.
 
gbiz123 said:
I operate a tiktok scraping SaaS (Toughdata) which you can find on the BHW marketplace. As a freelancer I've made custom bots for various brands. Theres endless ways to make it profitable as long as you can address someone's needs.
Click to expand...
That's really awesome, thanks for helping.
 
ekuin0x said:
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
Click to expand...

I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
 
ReverseEngineering said:
I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
Click to expand...
Great idea! I'll look into it. Thanks
 
ReverseEngineering said:
I would consider a different approach:

Why don't you use the direct HTTPS calls of the official iOS Twitter/X app instead? So you don't have to worry about any "head" screen emulation, you don't need graphic cards, desktop machines etc. I don't recommend the Android Twitter/X app here again, because Android sends too much sensitive device data to Google and Twitter/X (too easy to detect).

Of course this would require some special skills.
Click to expand...
1. how to check requests sent via a mobile app from a real phone?
2. how do you send requests without a mobile app? do you send mobile footprint? afaik it's almost impossible to fake mobile device reliably
3. why not just reverse engineer a platform using desktop?
 
reaaski said:
1. how to check requests sent via a mobile app from a real phone?
2. how do you send requests without a mobile app? do you send mobile footprint? afaik it's almost impossible to fake mobile device reliably
3. why not just reverse engineer a platform using desktop?
Click to expand...

Okay, a real short and easy description, without digging too deep into the details:

1. A special proxy cascade with custom extensions, SSL unpinning, decryption, several iPhones, a lot of work (weeks to months of daily work). Unfortunately at the end of your research you always go like "oh my god, how dumb I was...".

2. A special toolset written in C++, for the first tests you can also use PHP/libcurl. No use of emulators, ADB bridges, connected phones.

3. Most apps I know limit their functions at the web interface, at least the ones I coded bots for. So the real app has more functions than the web interface. Therefore I always prefer the real app. BTW I wouldn't call the task of rebuilding web requests (browser) as "reverse engineering".

Hopefully this was not too technical. ;-)
 
ReverseEngineering said:
2. A special toolset written in C++, for the first tests you can also use PHP/libcurl. No use of emulators, ADB bridges, connected phones.
Click to expand...
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).
 
reaaski said:
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).
Click to expand...

Well, I will have a little more time end of January, I should consider creating a little "how to" or "journey" thread about reverse engineering in a nutshell.

I wrote "toolset" because this is a huge bunch of modules and libraries coded in C++. Some are responsible for plain HTTP/1.1 or HTTP/2.0 requests, some for authentication steps (device init, login etc.), some for regular tasks (e. g. follow, like, message) and some for special tasks like unifying videos (make them look unique).

To appear like a human app user is easier than you may think, you just have to build a workflow around all activities. So not just: sign up, login, follow, follow, follow.

Of course there are a few SMM panels that use connected phones to control TikTok, this usually works with ADB (ADB bridges). But when it comes to the recognition of incoming messages (detect them, scan their content, send a matching reply) ADB doesn't work anymore. Some try to use OCR then, but... forget it.

On the other hand, if you really have a "client less" (no connected phones) environment, based on real reverse engineered app code, you can simply call a method and will receive all incoming messages in real text. No OCR, 100 % matches, 100 % matching replies.
 
ReverseEngineering said:
Well, I will have a little more time end of January, I should consider creating a little "how to" or "journey" thread about reverse engineering in a nutshell.

I wrote "toolset" because this is a huge bunch of modules and libraries coded in C++. Some are responsible for plain HTTP/1.1 or HTTP/2.0 requests, some for authentication steps (device init, login etc.), some for regular tasks (e. g. follow, like, message) and some for special tasks like unifying videos (make them look unique).

To appear like a human app user is easier than you may think, you just have to build a workflow around all activities. So not just: sign up, login, follow, follow, follow.

Of course there are a few SMM panels that use connected phones to control TikTok, this usually works with ADB (ADB bridges). But when it comes to the recognition of incoming messages (detect them, scan their content, send a matching reply) ADB doesn't work anymore. Some try to use OCR then, but... forget it.

On the other hand, if you really have a "client less" (no connected phones) environment, based on real reverse engineered app code, you can simply call a method and will receive all incoming messages in real text. No OCR, 100 % matches, 100 % matching replies.
Click to expand...
You make it sound like creating a custom bot with web requests is always the best solution.
Did you ever work with Instagram? Did you check all the requests they are doing?
How would you emulate all of this with your libraries?
 
AllOutAnime said:
Did you ever work with Instagram? Did you check all the requests they are doing?
How would you emulate all of this with your libraries?
Click to expand...

I was into Instagram a few years ago, but only for some researches.

Compared to other social media apps Instagram is very easy to bot. There are many existing solutions on the market already (a few working with the unofficial Instagram API based on the reverse engineered app), so I personally don't want to create another one.
 
It seems like browser or real device solutions would be harder to detect in the long run
 
ekuin0x said:
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?
Click to expand...

are they all made using different ips ? because if there all made on 1ip
when 1 accounts gets banned, they all go down.
 
proxygo said:
are they all made using different ips ? because if there all made on 1ip
when 1 accounts gets banned, they all go down.
Click to expand...
ofc different IPs
 
ekuin0x said:
I am currently working on a twitter bot using Selenium/Python and things are going great so far, The only question I have is : Do people automate the process of new accounts registration too or just do that manually?
If the limit rate for tweeting is 2400 a day and I need a million tweet that means I need around 420 account which is crazy.
any idea on how to do it the right way?
Click to expand...

You shouldn't automate brand new accounts unless you absolutely need to, in my opinion.
 
reaaski said:
I'm just wondering what that toolset could consist of, so that one looks like a real user and not a bot. Really, stuff nobody talks about. Mostly people assume real device is necessity (for example in TikTok related threads).
Click to expand...
This might be difficult, the kind of thread can easily make it obvious it's a bot.
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top