Hack Forums
Account shops - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: Account shops (/showthread.php?tid=5986238)



Account shops - 0xc0de - Jul 3, 2019

How do people make account shops with like hundreds of different platforms. Like netflix,spotify,brazzers,... do they just bruteforce accs?


RE: Account shops - orristur - Jul 3, 2019

They get e-mail login/password lists and then check to see if any of those combos work with a particular service.


RE: Account shops - F11 - Jul 4, 2019

They use sites that to me seem like a simplified shopify. I think it's easy though.

selly.gg
shoppy.gg
rocketr.net
at.shop


RE: Account shops - 0xc0de - Jul 4, 2019

(Jul 4, 2019 01:43 AM)F11 Wrote:  They use sites that to me seem like a simplified shopify. I think it's easy though.

selly.gg
shoppy.gg
rocketr.net
at.shop

I mean how they get the accs.


RE: Account shops - Young Sosa - Jul 4, 2019

(Jul 4, 2019 01:43 AM)F11 Wrote:  They use sites that to me seem like a simplified shopify. I think it's easy though.

selly.gg
shoppy.gg
rocketr.net
at.shop
I think his questions isn't what platform does the vendors use, but how they get the accounts.


RE: Account shops - F11 - Jul 4, 2019

(Jul 4, 2019 02:58 AM)Young Sosa Wrote:  I think his questions isn't what platform does the vendors use, but how they get the accounts.

Oh ok. Whoops. lol


RE: Account shops - Super - Jul 4, 2019

They use a technique called “credential stuffing” to crack the accounts. Basically, they find public database breaches and reuse the credentials to get into other sites. This is the exact reason you shouldn’t use the same password on multiple websites.

As for the software they use, usually it’s something called Sentry MBA, which is a multithreaded HTTP based cracker.


RE: Account shops - FaceBack - Jul 4, 2019

(Jul 4, 2019 09:10 PM)Mako Wrote:  They use a technique called “credential stuffing” to crack the accounts. Basically, they find public database breaches and reuse the credentials to get into other sites. This is the exact reason you shouldn’t use the same password on multiple websites.

As for the software they use, usually it’s something called Sentry MBA, which is a multithreaded HTTP based cracker.

na you outdated with the times lol
in 2019 its OB


RE: Account shops - Super - Jul 4, 2019

(Jul 4, 2019 09:13 PM)FaceBack Wrote:  na you outdated with the times lol
in 2019 its OB

OB? I’ve never heard of anyone using that software.

I have multiple colleagues that own account shops, all of them use either Sentry or custom Python+Selenium scripts.


RE: Account shops - FaceBack - Jul 4, 2019

(Jul 4, 2019 09:17 PM)Mako Wrote:  OB? I’ve never heard of anyone using that software.

I have multiple colleagues that own account shops, all of them use either Sentry or custom Python+Selenium scripts.

they must all be selling outdated site logins as they only cracking sites without SSL certificates which only 374343773 sites have SSL certificate.


RE: Account shops - Super - Jul 4, 2019

(Jul 4, 2019 09:23 PM)FaceBack Wrote:  they must all be selling outdated site logins as they only cracking sites without SSL certificates which only 374343773 sites have SSL certificate.

You have no clue what you’re talking about. Sentry works just fine on HTTPS connections (which is TLS now — NOT SSL).

-1 for you, stop posting trash everywhere.


RE: Account shops - FaceBack - Jul 4, 2019

(Jul 4, 2019 09:25 PM)Mako Wrote:  You have no clue what you’re talking about. Sentry works just fine on HTTPS connections (which is TLS now — NOT SSL).

-1 for you, stop posting trash everywhere.

wrong
-1 for you, stop posting trash everywhere.