.NET [vb.NET help please] How to check if username and password is valid - Printable Version

[.NET] [vb.NET help please] How to check if username and password is valid - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [.NET] [vb.NET help please] How to check if username and password is valid (/showthread.php?tid=137313)

Pages: Pages 1 2

[vb.NET help please] How to check if username and password is valid - KingLilG - Sep 3, 2009

Hi, I made a phiser in VB.NET and I want it to check if the username and password they entered is working. So it should check with the real site if it's valid, else it should come up like "Invalid username/password!"

Thanks in advance.

~Ararura

- Feminist - Sep 3, 2009

use a webbrowser to login to the website, then read data.

if it finds "welcome" then you know the password is real

else

password is fake

- pl0xy - Sep 3, 2009

I looked for it a few months ago to, found some things on google...

- KingLilG - Sep 3, 2009

(Sep 3, 2009 07:08 AM)scriptkiddy Wrote: use a webbrowser to login to the website, then read data.

if it finds "welcome" then you know the password is real

else

password is fake

I'm pretty noob at programming so I don't know how to do that :/

- Feminist - Sep 3, 2009

Source Code Dump
|
|
|
|
Read Text:
|
|
Spoiler (Click to View)
|
|
|
|
Login:
|
|
Spoiler (Click to View)

Of course you will need to view the page source to find "Email" "pass" and "Login!" values, then just change them accordingly.

I am not going to tell you were they go, because that shouldn't be hard to figure out.

- GoldStar - Sep 3, 2009

check farhan's facebook freezer and see how it works.

- SgtPunishment - Sep 3, 2009

I've used both bits of code, but when ever I try it in a stand alone program, the msgbox pops up saying the account is fake before the page finishes loading (even does this on a real account)

- GoldStar - Sep 3, 2009

(Sep 3, 2009 08:57 AM)SgtPunishment Wrote: I've used both bits of code, but when ever I try it in a stand alone program, the msgbox pops up saying the account is fake before the page finishes loading (even does this on a real account)

double click your webbrowser you will see the document complited even. there you should put your code to check.

- SgtPunishment - Sep 3, 2009

ah, thanks for that tip, I'll try it now

I have it sort of working, but it spams the account is fake like 4 or 5 times, and when I successfully login, says it's fake, then says it's real, here's the source code of what I've got if you could tell me where I went wrong i'd be very greatful

Code 
Public Class Form1

    Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load

        WebBrowser1.Navigate("http://login.live.com/login.srf")

    End Sub

    Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click

        WebBrowser1.Document.GetElementById("i0116").SetAttribute("value", (tbEmail.Text))

        WebBrowser1.Document.GetElementById("i0118").SetAttribute("value", (tbPassword.Text))

        WebBrowser1.Document.GetElementById("i0011").InvokeMember("click")

    End Sub

    Private Sub WebBrowser1_DocumentCompleted(ByVal sender As System.Object, ByVal e As System.Windows.Forms.WebBrowserDocumentCompletedEventArgs) Handles WebBrowser1.DocumentCompleted

        Dim lol As New Object

        Try

            lol = WebBrowser1.Document.Body.InnerHtml

        Catch myerror As Exception

            MsgBox(myerror.Message)

            Exit Sub

        End Try

        If InStr(lol, "Password reset information") Then

            MsgBox("account is real")

        Else

            MsgBox("account is fake")

            Exit Sub

        End If

    End Sub

    Private Sub Button2_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button2.Click

        End

    End Sub

End Class

need web browser, two text boxes, two buttons

- GoldStar - Sep 3, 2009

here is what is wrong. lets watch the code :
1-on the load => navigate
when the page is loaded, document complited,before you click. and of course wont find the ID of successful login. that's why you get bullshit spam.
you need two things :
1-make the button disabled, if the page is not loaded :
Private Sub Form1_Load(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles MyBase.Load
Button1.enabled = false
WebBrowser1.Navigate("http://login.live.com/login.srf")
Button1.enabled = true
End Sub
2-you make a boolean, to specify if the page your gonna check is the right one, this way:

dim nav as boolean = false
Private Sub Button1_Click(ByVal sender As System.Object, ByVal e As System.EventArgs) Handles Button1.Click
WebBrowser1.Document.GetElementById("i0116").SetAttribute("value", (tbEmail.Text))
WebBrowser1.Document.GetElementById("i0118").SetAttribute("value", (tbPassword.Text))
WebBrowser1.Document.GetElementById("i0011").InvokeMember("click")
nav = true
End Sub

Private Sub WebBrowser1_DocumentCompleted(ByVal sender As System.Object, ByVal e As System.Windows.Forms.WebBrowserDocumentCompletedEventArgs) Handles WebBrowser1.DocumentCompleted
if nav then
Dim lol As New Object
Try
lol = WebBrowser1.Document.Body.InnerHtml
Catch myerror As Exception

MsgBox(myerror.Message)
Exit Sub
End Try

If InStr(lol, "Password reset information") Then
MsgBox("account is real")
Else
MsgBox("account is fake")
Exit Sub
End If
end if
End Sub

i hope i posted it right cuz did'nt check it with vb.net

- SgtPunishment - Sep 3, 2009

it sort of works, it doesn't spam anymore, but as soon as you've hit "Login" and the page changes, it says "account is fake" and soon as you hit "OK" the page will actually load and eventually spit out "account is real" is there any way of making it not spit anything out until the page has finished loading?

- GoldStar - Sep 3, 2009

(Sep 3, 2009 12:31 PM)SgtPunishment Wrote: it sort of works, it doesn't spam anymore, but as soon as you've hit "Login" and the page changes, it says "account is fake" and soon as you hit "OK" the page will actually load and eventually spit out "account is real" is there any way of making it not spit anything out until the page has finished loading?

why you don't make a double check? check element ID and url. maybe will solve the problem.

- SgtPunishment - Sep 3, 2009

hmm, I may do that... once I figure it out, but I've asked too much, this I will attempt to figure out on my own lol.

- Feminist - Sep 3, 2009

make a 4 sec delay then (hope this is right im not in vb)

Code 
'declare this anywere outside of a sub

Sub Delay(ByVal dblSecs As Double)

Const OneSec As Double = 1.0# / (1440.0# * 60.0#)

Dim dblWaitTil As Date

Now.AddSeconds(OneSec)

dblWaitTil = Now.AddSeconds(OneSec).AddSeconds(dblSecs)

Do Until Now > dblWaitTil

Application.DoEvents() ' Allow windows messages to be processed

Loop

End Sub

Now you have declared the timer outside of a sub, put this next part were you want it to go, so all you basically do is call this delay Delay(4) 'waits for seconds and then check for text

Code 
Call Delay(4) 'waits 4 seconds before next action

'now this will wait 4 seconds before doing the next action, so call a delay of whatever seconds you want then

'put your next code here

Also you really should encrypt your login info so nobody can steal your phished stuff, check out this tut by Miharbi

https://hackforums.net/showthread.php?tid=137485

EDIT: just checked its working for me.

- BlueMelon - Sep 3, 2009

Or just do e.url to a invisible textbox and if the textbox changes url then its real.
I dont know, This can also be very unacurate cus websites way also change url if its wrong.