Hacked SHITCASH Survey Locker - Printable Version

Hacked SHITCASH Survey Locker - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Hacked SHITCASH Survey Locker (/showthread.php?tid=5537396)

Hacked SHITCASH Survey Locker - GodlessOlympian - Jan 29, 2017

Hey,
I was wondering if anyone knows how to program well enough to create a legit survey bypasser/unlocker.
I was fiddling around for about an hour with a file for dl thru shitcash.
Came from a cracked software website which pw locks their shit with all sorts of random letters and crap. Look:

Code 
Password to the file: 9P4YMqdjoR5g*48$U1Np

Anyway, I'm just really proud of myself for being a total novice with hacking/cracking sites and being able to unlock a file from shitcash.
I looked around for an unlocker, too, but as you all know they're also password protected by the same group.

But seriously, does anyone know or have the time to explain to me how I can build a python code for unlocking files from file lockers?

In case anyone is wondering this is done via inspect element.
No real skills needed....
code you're looking for:

Code 
var SESS_ID = "37XX5XX44";

var FILE_ID = "581XXX7";

To check if you changed your cookie from 0 to 1:

whateverthesite(DOT)whateva/download_check.php?fid=581XXX7&sid=37XX5XX44

If you haven't changed your cookie value it'll say:

Code 
{"status":"no"}

Once you've done so you will get:

Code 
{"status":"yes"}

You can figure the rest out.

* - Backopy - Jan 29, 2017

Awesome find!

Unfortunately if someone were to actually code this, Sharecash could just change their method. Your best bet is to actually contact Sharecash and see if they'll reward you for finding out the vulnerability - maybe even some sort of hall of fame?

* - GodlessOlympian - Jan 29, 2017

(Jan 29, 2017 05:19 PM)Backopy Wrote: Awesome find!

Unfortunately if someone were to actually code this, Sharecash could just change their method. Your best bet is to actually contact Sharecash and see if they'll reward you for finding out the vulnerability - maybe even some sort of hall of fame?

Thought about reporting it to them, but I doubt they would give me any reward. And you're right. They'd probably patch it.
However, if we can exploit this and keep it as a crack/bypass for us to use instead so none of us ever have to deal with these bullshit surveys again, then I would see it as a great accomplishment!