![]() |
|
[US East Coast Exclusive] Xfinitywifi Hotspot 'Exploit' - Free Unlimited Internet $10 - Printable Version +- Hack Forums (https://hackforums.net) +-- Forum: Marketplace (https://hackforums.net/forumdisplay.php?fid=105) +--- Forum: Auxiliary (https://hackforums.net/forumdisplay.php?fid=453) +---- Forum: Member Sales Market (https://hackforums.net/forumdisplay.php?fid=176) +---- Thread: [US East Coast Exclusive] Xfinitywifi Hotspot 'Exploit' - Free Unlimited Internet $10 (/showthread.php?tid=5933410) |
[US East Coast Exclusive] Xfinitywifi Hotspot 'Exploit' - Free Unlimited Internet $10 - Ceruleancerise - Jan 24, 2019 Hi everyone ✌ If you live on the East Coast you've likely seen 'xfinitywifi' hotspots before -- they're nearly everywhere -- and offer free internet access to xfinity customers and a 1hr trial to non-customers. Upon connection to the hotspot you'll be prompted with a captive portal, from here you can sign-on with your customer credentials or start a 1hr trial. The method by which trials are dispensed and revoked is by MAC Address -- so, based on this, one could simply procure infinite trials by changing MAC Address every hour and refilling out the trial form. This is a well known method, although not easily automatized due to the form, but what I present today is something different. If we take a look at the Xfinity documentation on these hotspots an interesting note can be seen - "Qualifying customers can register up to 20 WiFi-enabled devices with our automatic sign-in feature. This eliminates the need to sign in every time you're on-the-go." Can you guess the method by which automatic sign-in is mediated? Yes, MAC Addresses! -- which brings me to the focal point of this thread. This thread is for the sale of valid, working, autosign-on-able MAC Addresses that have at one point been registered by an xfinity customer. Mostly iPhones. They are valid for as long as the individual who owns the device from which the MAC Address originates is an xfinity customer. It should be noted this does NOT negatively effect the xfinity customer, who owns the device, from which the MAC Address was procured. You can facilitate them by use of a linux device and the tool macchanger, or a repeater (WISP) capable router such as the AR300M by GL.iNET. For several months I ran my entire network off of such a router in a scheme such as (Computers, Phones, Devices) -> AR300M -> xfinitywifi -> internet I'm selling them for $10 each, bitcoin being my only accepted medium, if you're interested or have questions shoot me a message or reply to this thread. I offer a 6 month warranty, if by chance the address becomes invalid within that time (unlikely, ones I've been using last years), I'll issue you another. RE: [US East Coast Exclusive] Xfinitywifi Hotspot 'Exploit' - Free Unlimited Internet $10 - jobhip - Jan 29, 2019 (Jan 24, 2019 08:55 AM)Ceruleancerise Wrote: Hi everyone ✌ Sorry to bump a week old thread...but I personally once bought an xfinity login for about $2. It logged in just fine and my mac address has been whitelisted on all those networks ever since. Are there any advantages to paying 5x more with your service? I do need another device whitelisted and the account seems to have stopped working. RE: [US East Coast Exclusive] Xfinitywifi Hotspot 'Exploit' - Free Unlimited Internet $10 - Ceruleancerise - Feb 20, 2019 (Jan 29, 2019 10:00 AM)jobhip Wrote: Sorry to bump a week old thread...but I personally once bought an xfinity login for about $2. It logged in just fine and my mac address has been whitelisted on all those networks ever since. Are there any advantages to paying 5x more with your service? I do need another device whitelisted and the account seems to have stopped working. tbqh i had/have no idea for what my pricing should be is the mac address you whitelisted with the xfinity login still working after the account stopped working? if so, why not just spoof the mac address of the first device to the other device? advantages in pre-whitelisted MAC Addresses as opposed to xfinity login details would be reliability, harder to trace/catch, bypasses initial login form -- nothing too drastic though. anyways thanks for the interest |