Jump to content
UBot Underground

db00

Fellow UBotter
  • Content Count

    50
  • Joined

  • Last visited

  • Days Won

    1

Posts posted by db00

  1. E4od8YH.jpg

     

     

    Selling Cheap Private Proxies (from 0.8$ on the bigger packs) and Super Cheap Shared Proxies (from 0.25$ on the bigger packs)
    Perfect for botting social networks.

    Unlimited Bandwidth & Threads.
    Anonymous Proxies. No logs are being stored.
    All proxies are HTTP/HTTPS no SOCKS.
    Non Sequential IPS.
    You can request for the private proxies to be refreshed once per month.
    NO Setup fee
    Do not use them for anything illegal or offensive.
    An active subscription is required to maintain access to your proxies.
    Bulk discounts are available. If you start with 1 pack and later you'll buy a few more , contact us and we'll adjust your invoice with the new bulk pricing. ( Price list below).
    Yearly discounts are available.
    Depending on the pack of your private proxies you can choose a few locations.
    The Shared-Proxies are from USA only
    IP Authentification only.
    Private Proxies : You get access to control panel where you can activate up to 10 IPs instantly.
    Shared Proxies: You'll get access on 1 IP only. You can change that IP via support ticket (no control panel access).
    Our Guarantee:
    If the proxies aren't suitable for whatever you need request a full refund within 3 days of ordering! (For packs up to 101 proxies.)

    No vouche copies are available. We've been selling proxies among our private customers for a while now and just decided to open the service to the public.
    Try it risk free with our 3 days money back guarantee!

    Pricing! Monthly Payments!
    Private Proxies:

    10 Proxies - 10$ (1$ each)
    60 Proxies - 60$ (1$ each)
    100 Proxies - 95$ (9.5$ each)
    500 Proxies - 450$ (0.9$ each)
    1000 Proxies - 850$ (0.85$ each)
    2000 Proxies - 1600$ (0.8$ each)

    Shared Proxies:
    100 Proxies - 35$ (0.35$ each)
    200 Proxies - 60$ (0.3$ each)
    500 Proxies - 125$ (0.25$ each)
    1000 Proxies - 250$ (0.25$ each)
    2000 Proxies - 500$ (0.25$ each)

    Wordwide Locations available atm:
    Sydney, Australia
    Ontario, Canada
    Quebec, Canada
    Beijing, China
    Estonia, Europe
    Sweden, Europe
    Ukraine, Europe
    Paris, France
    Berlin, Germany
    Frankfurt, Germany
    New Delhi, India
    Israel, Asia
    Tokyo, Japan
    Amsterdam, Netherlands
    Lisbon, Portugal
    Bucharest, Romania
    Zurich, Switzerland
    Essex, United Kingdom
    London, United Kingdom
    Rochdale, United Kingdom
    Staffordshire, United Kingdom
    Surrey, United Kingdom

    USA Locations available atm:
    Birmingham, AL
    Mesa, AZ
    Phoenix, AZ
    Tucson, AZ
    Fresno, CA
    Hacienda Heights, CA
    Los Angeles, CA
    Sacramento, CA
    San Diego, CA
    San Francisco, CA
    San Jose, CA
    Miami, FL
    Atlanta, GA
    Honolulu, HI
    Chicago, IL
    Church Creek, MD
    Dearborn, MI
    Kansas City, MO
    Omaha, NE
    Las Vegas, NV
    Parsippany, NJ
    Buffalo, NY
    New York, NY
    Columbus, OH
    Edmond, OK
    Beaverton, OR
    Portland, OR
    Nashville, TN
    Austin, TX
    Dallas, TX
    Houston, TX
    Seattle, WA

    https://bywex.com/clients

    Payment via paypal, crypto, bank, perfectmoney etc
    You can manually copy paste this skype ID live:support_42971

  2. @DAN in this last 1324 version there is a critical problem that was not here before

     

    Problem signature:
      Problem Event Name: APPCRASH
      Application Name: mybot.exe
      Application Version: 4.0.0.0
      Application Timestamp: 59fa1d97
      Fault Module Name: AutoItX3.dll
      Fault Module Version: 3.3.14.2
      Fault Module Timestamp: 55fc19d0
      Exception Code: c0000005
      Exception Offset: 000167f3
      OS Version: 6.3.9600.2.0.0.272.7
      Locale ID: 1033
      Additional Information 1: 5861
      Additional Information 2: 5861822e1919d7c014bbb064c64908b2
      Additional Information 3: 5f25
      Additional Information 4: 5f2531ae070278f893fa99352dadd49e
    

    Same bot, same code without any changes but the bots take random crashes !?!?!?

     

    What does autoitx3.ddl do and is it needed ?

     

    Can you please advise ?

    Having the same issues

  3. GET /papi/media?c=2@6lVebjxf3VpnpBUVkW2lf.NsIdPCVo3F@XV.NL9veOPMENU8bgrSwpX9APTC4lJjoC5jBLbRNaxFzhT6zFLfH59u-W-4DMsBVNJuU5tev5cj8vYxHalbT4W3iMGAy-Xb6FwW3EKa-9yXMirz56.D2Meo-GYVQtwFCrMbPW0uyzWyEtuyj2xcTD9w0qwdwVTCehr0fZ9ocHM1FtLWM48GE60aqzXTHmbyc0GHK.WhJgvtGXsdI-dbeBtRr18Rr-IWpRQZn3fd9tHIIGqrdVwYBEkoxezQzUXqgjKDdHcr8yRllKmpN5q2-Sh6tyjdcR.7xJkhFXIK0uoA HTTP/1.1

    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0


    Content-Type: image/gif

    Host: api-secure.solvemedia.com

    Cookie: _sscn_a=rC-09JVdrdedMsIfr89BbzoooPyHBYnv; _sscn_b=2@b2@LFTj9YOMmZWTGqsTPffTSGHdMAfwZOjoIbXRQL-gp66Pvl-JVmP-yc7DcVMDMDsIEehKPoNn54lfM0A-T5E6jW3RRbIxwcKlVIFQ68lj.iDgHDFsI27lPUqzOI5wksS9H-8X6ztc7xJtD5.e-P42OF-qa8AxUShCaC4XIPMXRYBNxe6O57WPFaZ7cuV7cyNscrbhA6JTCwXSB-.HGLFaHQ; _ssts_lr=1500152434; _sscn_up=2@up1@6TwOJ0YNydho3OUIMYEM9ATqreof.LM4RXr68NGVSeasAs1oCmq.B.Oqfv2Xly7UzMTybRCQT7SOgoEq22aNulcCx8eaXhAwN-agOwwaIw5Y4Hsqmxf9AB2CtXpXMCeT

    Accept-Encoding: gzip

    Connection: Keep-Alive

     

    this is the fiddler header request . In fiddler I can see the image. in ubot all I see is weird text,

     

     

    can you try this ? Should give you the same result just by copy pasting it.

    plugin command("HTTP post.dll", "http settings headers", "Accept Encoding", "gzip, deflate, br")
    plugin command("HTTP post.dll", "http cookiecontainer mode", "Advanced")
    set(#Current User,$account data("First Name"),"Global")
    set(#Linktekkitserverlist,"https://tekkitserverlist.com/server/n4hTlTqw/vote","Global")
    plugin command("HTTP post.dll", "http cookiecontainer mode", "Advanced")
    plugin command("HTTP post.dll", "http max redirects", 70)
    plugin command("HTTP post.dll", "http auto redirect", "Yes")
    plugin command("HTTP post.dll", "http keep alive", "Yes")
    set(#get,$plugin function("HTTP post.dll", "$http get", #Linktekkitserverlist, $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#VoteToken,$plugin function("HTTP post.dll", "$xpath parser", #get, "//input[@id=\"web_server_vote__token\"]", "value", "HTML"),"Global")
    load html(#get)
    set(#keyy,$find regular expression(#get,"(?<=challenge\\.noscript\\?k=)(.*?)(?=\")"),"Global")
    set(#data Verification,$find regular expression(#get,"(Start Verification)"),"Global")
    set(#cookies,$plugin function("HTTP post.dll", "$http get all cookies"),"Global")
    plugin command("HTTP post.dll", "http load error page", "Yes")
    set(#TekkitCaptchaRegex,$find regular expression(#get,"(?<=challenge\\.noscript\\?k=)(.*?)(?=\")"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/challenge.script?k={#TekkitCaptchaRegex}", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\" : \")(.*?)(?=\")"),"Global")
    if($comparison(#TekkitChidRegex,"= Equals",$nothing)) {
        then {
            set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\"     : \")(.*?)(?=\")"),"Global")
        }
        else {
        }
    }
    set(#TekkitUIDRegex,$find regular expression(#get,"(?<=\"uid\"      : \")(.*?)(?=\")"),"Global")
    set(#TekkitTimeStampRegex,$find regular expression(#get,"(?<=\"timestamp\": )(.*?)(?=,)"),"Global")
    comment("de reparat ChalStamp")
    set(#TekkitChalStampRegex,$find regular expression(#get,"(?<=chalstamp:      )(.*?)(?=,)"),"Global")
    set(#TekkitMagicStampRegex,$find regular expression(#get,"(?<=magic:          \')(.*?)(?=\')"),"Global")
    load html(#get)
    set(#HttpResponse,$plugin function("HTTP post.dll", "$http response", "response status"),"Global")
    set(#HttpResponseHeaders,$plugin function("HTTP post.dll", "$http response", "response headers"),"Global")
    set(#HttpResponseCookie,$plugin function("HTTP post.dll", "$http response", "cookies response"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/_challenge.js?k={#TekkitCaptchaRegex};f=_ACPuzzleUtil.callbacks%5B0%5D;l=en;t=img;s=standard;c=js,h5c,h5ct,svg,h5v,v/h264,v/ogg,v/webm,h5a,a/mp3,a/ogg,ua/firefox,ua/firefox47,os/nt,os/nt6.1,expand,fwv/PUk2pQ.cvbd56,htmlplus;am={#TekkitMagic};ca=script;ts={#TekkitTimeStampRegex}ct={#TekkitChalStampRegex};th=white;r=0.44304842139437706", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\"     : \")(.*?)(?=\")"),"Global")
    set(#TekkitUIDRegex,$find regular expression(#get,"(?<=\"uid\"      : \")(.*?)(?=\")"),"Global")
    set(#TekkitTimeStampRegex,$find regular expression(#get,"(?<=\"timestamp\": )(.*?)(?=,)"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/_challenge.js?k={#TekkitCaptchaRegex};f=_ACPuzzleUtil.callbacks%5B0%5D;l=en;t=img;s=standard;c=js,h5c,h5ct,svg,h5v,v/h264,v/ogg,v/webm,h5a,a/mp3,a/ogg,ua/firefox,ua/firefox47,os/nt,os/nt6.1,expand,fwv/PUk2pQ.cvbd56,htmlplus;am={#TekkitMagicStampRegex};ca=script;ts={#TekkitTimeStampRegex}ct={#TekkitChalStampRegex};th=white;r=0.44304842139437706", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    load html(#get)
    set(#TekkitChallengeRegex,$find regular expression(#get,"(?<=\"challenge\":\")(.*?)(?=\")"),"Global")
    set(#CurrentPicture,"tekkitserversCaptcha{$rand(1,5000)}.jpg","Global")
    plugin command("HTTP post.dll", "http file download", "https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}", "{$special folder("Application")}\\test2.gif", "")
    download file("https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}","{$special folder("Application")}\\test3.gif")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")

    load html(#get)

  4. Hey, 

    Having some problems using the video commands

     

    Getting "standardError"

     create single image video with audio("{$special folder("Application")}\\pic.jpg","{$special folder("Application")}\\audio .mp3","{$special folder("Application")}\\Out.mp4")
    create single image video with audio("{$special folder("Application")}\\pic.jpg","{$special folder("Application")}\\audio.mp3","{$special folder("Application")}\\Out1.mp4")

     

    http://wiki.ubotstudio.com/wiki/Create_single_image_video_with_audio

     

    How can I get this to work?

     

    ps: disable that fucking recaptcha page.

    always pops-up when trying to send PM, or now when trying to post this. 

    I'm completing it and its redirecting me to a blank page.. so I have to write everything again and again

  5. In fidler the captcha shows correctly , but in ubot's browser its showing as weird characters . Using the page source code from fiddler I can change the base 64 code into image, but on ubot I get these weird characters and I can't do that.

    Any Idea why this is happening?

    GIF87a,–çÿÿÿ¹¸PÏgjlyd;0ÔÃâôØÂßT»ÖVBþûùOà ¹ž"Ù½ˆþð`í5EUÃbÉ LJ¶urÆžš×ÇÂç?=©¸²ÀOivŒ*ž¯TÅÒ~Lfý®·i^\†%„®J¬ÖoÔ+Í)ÖkÓZW*ƒ~U¬¦€ÕÎQNˆÜÓJO_w{„¤§ªÑÓÏ:?OââØVòÚòî^‰ÏgéuXLà[_QæbÑ| 5Ll¾ÿ«˜U\®tu»”È´©Õ+2„˜‡¦Z±Sxµv—ºšµ¾¾Gž@ÑÀß•NR¤kv´ˆšÄ¥¾³­J»²pø–˽¼d´d€·ƒœ»£¸¿ÂD`EhxlŒ‘“°ªºbRX~nz›Š·¦¿S­«s²¸“¸Æ³½Ô«[Lµuq¿—É©¼v’¤êžŽKâÛÀ|mG=3G/ívzReÖ!v}ía’Ã^=|HÛˆPⲃ¬ðŸÁaC烹_ é;MäþQœ`_›%¿þ~nQ«Îý]GäÉFž³‘`»õ²ö÷T–·ñЄR.Ÿƒ‹ðmˆO´N1à}:DW1¤{î&œlåï‚^Š¿EO¹[ÎSð©;ÚnùãYŸÆˆ”ÍíßÕ³h>XOêþ_¬¤]·éó[Qÿã3ñÙ\ÇÔ{<½ã  ¸JpLÿ¨ZUèT“± ¶w¶ºÉŠŽÂ(ëv2“þ/ð°J@=•ó’ ™“èžP&–g°X!ûœã÷ŽÄ5ç0uæ2Æ&–=Ã~0gêðnˆ]_@ÃË#<Ñ|éà£äÕùBzðçyx|ëi‰?IÂÆžbÝ‘Éiàˆãå§]ó!p,¹$¤ªwŽŒIÁ èKˆ¢ªnhT1:ØÜ¡ª¼^ÂèuçR€‘²ÊQ]®NWåÅlö”Ûì0J92RÙûÀñjqZ»½Ë	n²±[~xÿˆ’l¹€Îù•v C165{£ßßß¿¿¿ŸŸŸ___???P8”¾“:ø‰,,–þH° Áƒ*\È°¡Ã‡ HœH±¢Å‹3jÜȱ£Ç C†„H²¤É“(MŠ\ɲ¥Ë—0_¦œI³¦Íˆ1sêÜɳ'Åø	å‡O!¿“G$-©h¤KMê»é³ªÕ«X+ŒºëC¨H» ôz“dÖ³hÓ²Üjß½}üöÙ`_Тo…N‹Ï©ÀºwÝ•;0/¿½÷݈®_°Œ°ïÞ@Äöö)›—°ÀÎ÷’îCÄICÏO3€ù&m=÷õg~³k·-L8sQÈoçpoï½–è;.7ßÌ‹+¨/wÁÔàÃþc:Ôi€Ù›WSŽ.°òmôw£Í~}Á¥žéj†œ?óعûW—zç±eß_à$Þ‚Âd A	>UyBåáp·Å7…üx'á}éAf >ù(W>Þí¦azÔà‹0Ž¤ÞŠ3Š_‹+Fe£Xí¡ç>Ú¦Ôt×55›ˆéõw¡‹16éäE8²ÈblžÉ&eŽ+&÷ÛK5¦Ü>Ô¥ç¥~“I·ÔaêÙlMqçaiOÆù$yC…Y#qz‰’K¦ÏRö%Ôd" ê×_–˜&ÅZ{¤	$ç¤1–eé¥6áS&Š Rêix˜†**Iö4UáBŸ¦ Þ¨¬¶Z“ªþ°šæꬴBë­gÕªë®Lâê«O¼Ëë¯Äò”űÈ&‹,E]áì³Ï*+-GÒ*{À´Åf«-µÕ&[Q³ÐBÛí²{ìµÖn«îº™›…Eà†ë¬¹¹+Qºìæ›-½ðÊí¸Ù‹­¾Ùú°m·Å+/ÀÓ;0ÁÄú ñ¾ëï¼×›qÅã:q±£{ìÅGd¬1Â÷âÛ±¯L¬Ê"'K2Êñ›²·+ÿÚòËäÞ,íÌÕ†dsÌ=çëοžK‘¹@ã,´ÉD¿kô­HÌôÅ07uÔ ]15ƒUS|õÂN?½5Ñ]¡öÚl{ýµx‹ÝmÓ.Ù‹‘Ò^·­÷þÞjSäöÛY…í«»YÌü’ÝiKÄwß0Þ8ßç ¸U‚ßJxáĸE‹;žvçl7>yO•Ãz9ɇo®8ä+úè9•žêå˜û[·êyï “ëžÃÎ’ìŸ^®0´©ÍºO¹·íûKÀOzùÃ?{ûБ÷~•îËÿÞ|œÂ£ÎÒó«+¯–ÞÙkï²éöF/ýJàWÿ÷iä—ÒöO½÷fo=x¯ËßýN²Ÿúœ%’ö‰¯AýóŸFZv¾Ù¥/s ¡Ôø" *ð"TÕóX3	†o²à+@	‚å’ ÔܧŽ„qáðw7®P„1rá%RBº‹†þí²aÏpØ$î0ƒ›¼‚(D§ÑIOT`ôC¬5q`F¤TË7Åð0j2ó×a¶E(®m‡Aâ¤Ö7.+Žq…$ÖÑx€.¦&\mã97Ç_õñˆv<Ã8H^¤Œžúãù’#„¤iµ#ÛØŠæ7EZÄ	˜t‚A(Åfˆ!YÉFæFB†k#Q̤&7ù¾Ez+¢$EPHJIFÒv¨´ä%3™ÈVŽ‘+‰åúf¹Df•2–¹ä$ETÙKe.˜"æ‰9Lcâr"¢L¦GT¹ÊI鲓 ´Š4ÊiöëšØDç!¹KL²’Žu|eOÆysZ…Ôþ”eF¾™nz“Ï”'Oèi‘ !a <€:ùÐeòòŸ¾',¥‰ƒÔ"Ȭç)÷ÉÏ~>ôŸt„fGZPƒbT˜Ñçç"Êf¾j(I+bÑ‹JdœäàñmËÌæ3aÈjfkgKìfÒ¦ø*•kÙ‚{wçó"·y{NpŸœæoI„¯ŽNô…ëhfAZÒ=¦ô¦-Ýê£ft×ëïGjäêYÎþ#‹OÍì<§‘Ïi²M-B¾r!ˉ†lq|ͦµÛº.§¥ŸÕk_ã3Ÿ* O”LºS_äü²ñ¼³f6Õ añ´)Rmkc{ËøMm­7|kp‡;Óã¾tFŠðt#y'ìvIíAöÑÞÃøU ãï{"ýÞëµþ%’h%0Ú²—ˆ·3lp½îš×ûM,º‹ib¿Î-16™ í4ZÜq'³7}c¤Ð"ÿ·–ONkŒ¬<Ò-ÿqÃ-­“_«{ÝŸžŸÎKÝó‰ wŽwYÐÍñUǘƘyÉÀtÀ¦<àa†ú¤žðþ6Òê‡xÄ=o>s½ì^ÿ¹×Â.vŠWÜÙañŸýšv’g»ívzÁçîò™'ôÜC¥a§;âRÆYá󱂨ü÷®ï\bkCÚÐ}¾úcÝÏho<¢y-¤œ¾n eùjn†÷ÈÏ­97/ºàÖÕ jCþ¬p‘Ï_¡ôªn2F¾®¶¸¹›õ­÷¹Hþû¤¯í§njQ{ß…kÚüÕìýBCrb¶e“Üd>èãw`®+ØɇG}õ¨sì_?ðˆ—x°w˜µZ³pÖU[·7~b6RÜ…pÀ‡yà•L­äXÐUìF÷wg"A}W€ù÷;·ÜGmxmß']nw¸iÂçYaw–—~-TWˆ·|Al5gD¥¶‚‚Ógx#¸}X!·W]ð}	˜ZâÇ€B8ƒ4ƒ48uUŸ§|¾Ô6 ˜ÌgŸ§dÇ#?„ú÷8vvÔb‘„J˜m¯V[OøtÛu~T(s¾çÈ÷.g´8¡ƒ‘…VÀƒîCje¨uþgh>«×`O†&ˆYLØ„åÇ‚µ@˜Oè§OìÕ‚ˆ†W÷~Ë—…X`bJÓ|!ˆb¨vÆE×2l…!H„¯‡`á†e‰*xVGW€èõr™8Mìuh§zqžxuŠóy£xX…7ˆ_8¨˜bØ3‡c®¸ŠØlÅ刯ÅW‘wšE]¸Û£vhfWøVÕ4ŒÐ•…ÿ÷~á¤H^xƒ¡(Š‰ˆÕˆs׈Ò׊gȈ±(‚³eð¢W€5Ž écæÈ‹BXëŒìHmì¥6XGƒu„ŒÈQ^(ˆÎ·Ô(ˆPZc¸Š™o	‹é%‹‰þÁmDz/Î…Y„c5‘i~¡6ðxˆˆ—q)¹Œ"©|$¹ƒ™¤…)™ÑÖ’.9„Ù—†¢vtš5ŽÖu“á‘>ðWgu‰èƒ•$”¹6͸Rª(K	i3¡JÈ÷A$•o©MÈE‹9oZiY\y‚	–åŽxw‡í¨TCùŠlùnù–rIÏ(ƒèSQÉŠÚ¸—™+Ù€7LÇ•]	kÑuŽSÕadù{­3Œ\ø˜m™"‰•	†Yˆ™‰—y¹"¥™fØ2SÆ‚-xV\™“eõv1h˜e]‚³šˆ¹˜Œ™–k£‘=˜”²i’Q›ÅþØš””º©Tjoœ¥’¦—†@ðq¨%÷v9éh“5ŒÿCÎùœ2ÇWàšîÇQ~è7’9™¡‘i’—›¾iŸkÆ/á—'„4I“Ä™h>æ^4Ùo\ð_æ#…2ÈŽªXøID™’×™…Ôy-rù–ñPIéÿÃ6Ÿé2Ù©&1ÒåxxHãœyˆJ©6#êŒ{•”)™#ê…%i¢ª´Ÿþ×àù|— ¡™†!AšU±3«™M5Ø¡DI›?šwÎ(¤w3C—ý9„'OYDž.ZžX!¥”#1d™˜]ƒ¥k¹‘zÃ|ýƒÏø–=ú7 ÃL’yzÙƒY¡¦þk ‡iÑ2>)n9jŸrz7[Z=÷ù™’Sˆl#¦ØÉC5hsØu/zlÚ¦n §|q* ŠmcÄ8>À7=ê2sjb…s1q¦FŽ_ð¨a¨jqˆºfô ƒ,qŸ¨ÊRy*’É:{Ñʥªœ—uà%lÑö»z­¼z×Ú«¾šÀ:ªu÷‹a¬­µ6"z!)’ ¤7ªzCÙRÒÊ~œšØZ¯ÛÊ­Z†Î¬á*/KŸ7Œ‚8¤o™Œv9¯ž6^ÓJ­a¯õŠ¯5ê­Ï¯ý œh{®Zê|xº‘ªŠ°ÆçˆÄÝŠÐB±Ëþ^›!¹–?w–IJr²°ªâ4±àº²,‹±+5È’¬ÆX’Ä…«+AˆúY³·¢³õ­>P±G"´éêŸ5ÈB1±w4Ë°Ûâ´¥²g¦Uë²XËï ܤ°‹³M{²©!¶fð‰H˜i©^«.`‹r+¬YQ·vË;Šssz»·ë·àQ5Ze‚;>¼3W˜””°Ó·~[•àñ¸áA¸ 3BŠãI·›èX®Ãµ“c¹‡¨¨¡¹K¦Š¦8Ÿºª{¬«*J[¹¨›º˜»º£ë+¯;5±7³«µ+¿»2¹«¡+º­E,·û6É«»“R¼¶¯9þSrŠ'ËëÔ[½ÖÛ1Á6ËÝë½l¼‰ê»¾ëû"Û˽½ë»ß«.ì%W¿øâ»»Ž¿òk«ô›¿ö›¾\¿q6¾äë¿¿r¼žRÀø«,ÀÌ¿iQ¾æû+œÁ̾'ü)Ü <Â$¬¿²KÁ	ܼÚ§QÂ.\‹ÂgñÁ©ÀâñÂ8üÂ1ü$4O‘Ã@Ã'ì$ðèÃ/Ä.l¼ÃDÜÃF¬ÄHÁ±ÄhäÄ/Ô¾Åø»LGVì?ÅA]\Å lÄeL8Üi¼ÁQÇWaÈ;tÇ°£È‹ìÈtLÉv|Æt$ȃ¼ÅgÁÈþÉ‘,ÅYlÉUáÉòÊ¡LʬÊlÌÊåƒÊ©lÀ?ìÊ:AËÙ˱¬¾SlË€ÌEÜË-aÊÀÜ¿<Ì\ÌË ;
    
  6. Having the same problem with solvemedia.com captchas

    With http get I can see the picture in fidler. But with http download I will get an error. 

    Any idea on how I can download it so I can send it to a captcha solver service?

     

    Here's the code if somebody wants to have a look.

    Thank you,

    plugin command("HTTP post.dll", "http settings headers", "Accept Encoding", "gzip, deflate, br")
    plugin command("HTTP post.dll", "http cookiecontainer mode", "Advanced")
    set(#Current User,$account data("First Name"),"Global")
    set(#Linktekkitserverlist,"https://tekkitserverlist.com/server/n4hTlTqw/vote","Global")
    plugin command("HTTP post.dll", "http cookiecontainer mode", "Advanced")
    plugin command("HTTP post.dll", "http max redirects", 70)
    plugin command("HTTP post.dll", "http auto redirect", "Yes")
    plugin command("HTTP post.dll", "http keep alive", "Yes")
    set(#get,$plugin function("HTTP post.dll", "$http get", #Linktekkitserverlist, $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#VoteToken,$plugin function("HTTP post.dll", "$xpath parser", #get, "//input[@id=\"web_server_vote__token\"]", "value", "HTML"),"Global")
    load html(#get)
    set(#keyy,$find regular expression(#get,"(?<=challenge\\.noscript\\?k=)(.*?)(?=\")"),"Global")
    set(#data Verification,$find regular expression(#get,"(Start Verification)"),"Global")
    set(#cookies,$plugin function("HTTP post.dll", "$http get all cookies"),"Global")
    plugin command("HTTP post.dll", "http load error page", "Yes")
    set(#TekkitCaptchaRegex,$find regular expression(#get,"(?<=challenge\\.noscript\\?k=)(.*?)(?=\")"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/challenge.script?k={#TekkitCaptchaRegex}", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\" : \")(.*?)(?=\")"),"Global")
    if($comparison(#TekkitChidRegex,"= Equals",$nothing)) {
        then {
            set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\"     : \")(.*?)(?=\")"),"Global")
        }
        else {
        }
    }
    set(#TekkitUIDRegex,$find regular expression(#get,"(?<=\"uid\"      : \")(.*?)(?=\")"),"Global")
    set(#TekkitTimeStampRegex,$find regular expression(#get,"(?<=\"timestamp\": )(.*?)(?=,)"),"Global")
    comment("de reparat ChalStamp")
    set(#TekkitChalStampRegex,$find regular expression(#get,"(?<=chalstamp:      )(.*?)(?=,)"),"Global")
    set(#TekkitMagicStampRegex,$find regular expression(#get,"(?<=magic:          \')(.*?)(?=\')"),"Global")
    load html(#get)
    set(#HttpResponse,$plugin function("HTTP post.dll", "$http response", "response status"),"Global")
    set(#HttpResponseHeaders,$plugin function("HTTP post.dll", "$http response", "response headers"),"Global")
    set(#HttpResponseCookie,$plugin function("HTTP post.dll", "$http response", "cookies response"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/_challenge.js?k={#TekkitCaptchaRegex};f=_ACPuzzleUtil.callbacks%5B0%5D;l=en;t=img;s=standard;c=js,h5c,h5ct,svg,h5v,v/h264,v/ogg,v/webm,h5a,a/mp3,a/ogg,ua/firefox,ua/firefox47,os/nt,os/nt6.1,expand,fwv/PUk2pQ.cvbd56,htmlplus;am={#TekkitMagic};ca=script;ts={#TekkitTimeStampRegex}ct={#TekkitChalStampRegex};th=white;r=0.44304842139437706", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    set(#TekkitChidRegex,$find regular expression(#get,"(?<=\"chid\"     : \")(.*?)(?=\")"),"Global")
    set(#TekkitUIDRegex,$find regular expression(#get,"(?<=\"uid\"      : \")(.*?)(?=\")"),"Global")
    set(#TekkitTimeStampRegex,$find regular expression(#get,"(?<=\"timestamp\": )(.*?)(?=,)"),"Global")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/_challenge.js?k={#TekkitCaptchaRegex};f=_ACPuzzleUtil.callbacks%5B0%5D;l=en;t=img;s=standard;c=js,h5c,h5ct,svg,h5v,v/h264,v/ogg,v/webm,h5a,a/mp3,a/ogg,ua/firefox,ua/firefox47,os/nt,os/nt6.1,expand,fwv/PUk2pQ.cvbd56,htmlplus;am={#TekkitMagicStampRegex};ca=script;ts={#TekkitTimeStampRegex}ct={#TekkitChalStampRegex};th=white;r=0.44304842139437706", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    load html(#get)
    set(#TekkitChallengeRegex,$find regular expression(#get,"(?<=\"challenge\":\")(.*?)(?=\")"),"Global")
    set(#CurrentPicture,"tekkitserversCaptcha{$rand(1,5000)}.jpg","Global")
    plugin command("HTTP post.dll", "http file download", "https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}", "{$special folder("Application")}\\test2.gif", "")
    download file("https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}","{$special folder("Application")}\\test3.gif")
    set(#get,$plugin function("HTTP post.dll", "$http get", "https://api-secure.solvemedia.com/papi/media?c={#TekkitChallengeRegex}", $plugin function("HTTP post.dll", "$http useragent string", "Firefox 27.0 Win7 64-bit"), #Linktekkitserverlist, "", ""),"Global")
    load html(#get)

    Tried to use the Audio part. Same thing. I can play it in Fiddler, but I can't download it with http file download. 

    this is a working response in ubot, just with GET fiddle raw for the audio

     

    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0
    X-Requested-With: XMLHttpRequest
    Content-Type: audio/mp3
    Host: api-secure.solvemedia.com
    Cookie: _sscn_a=wvjj9JjYrdedBcJNX6WJoT3wgXhA2nYT; _sscn_b=2@b2@9Wvxo04ypccG07F2UQscTofgZbwEKrvlx5qmrBW6asNdwUVloPz9pRN2y7c2JUUdtW-.nxbFA8aMGvE9Ps2dyr-mRViiX-qYBXGugpghwYekPf0pIoDftfFzne1MeP1asuMKZOSEqx.Cb3dDKD321QM7GiP7RKDA-fdM.1eYLSRzUF70ODBXTXZ1K2h.JM6iBbZs--TdiKtOTy0cv-XWGg; _ssts_lr=1497191708; _sscn_up=2@up1@bY4bvIbqbjvDlTO4mpWjVCp294bUwRq3VHkFLHCjCWc2Qe1br6bbFq3aRMtbbtFFoMuhnIjiMzcuszSu6GWVl1d9RJrHRREPVrE9tVtDVMS0iIr62xVsdEosDG0dc8lD
    Accept-Encoding: gzip
    Connection: Keep-Alive
     

     

    this is the http download fiddle raw

     

    Accept: */*
    Host: api-secure.solvemedia.com
    Cookie: __cfduid=dbc2a7b6f4f30281325c87df16a7d18491497189557; ahoy_visitor=831d5c8e-d30d-44f4-918d-6e49005a6952; ahoy_track=true; ubot_edition=developer; ubot_version=5.9.50; ubot_subscribed=true; ahoy_visit=ce2d798f-1b64-4f37-a799-d40952b73e35; hittail_ok=1; NID=105%3DQzi2DSwFFPV9oLHlRdo3Ts3svy8Ug0hzdY3eYzgTlWm3Qce_QluiHB3ZD9K-vKnk01OnWXEBx0grqDUUM-r2ZiUdUCXTnhHNnlHR3bk9NiPM0JHQCSXu4EyB9bqymZUl
     
     
    for the image working get fiddler raw data
     
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:27.0) Gecko/20100101 Firefox/27.0
    X-Requested-With: XMLHttpRequest
    Host: api-secure.solvemedia.com
    Cookie: _sscn_a=fPjj9OOhrdeda8IDeo2c4eYy12wDiRrj; _sscn_b=2@b2@2ZeJCVAt94o6ny8mC-9KBeAN7Cl2jIKmzx08kOfeMbbeIEik55wzARftl7uFlwmtoMmb0wFaRN8bJXcSvGDq5MphWDYmlmgUZ8woceXRwxpSx4bbjul.zu1DMyJCasgNUno61Mdvg-gmXwmgwUMGORFTsXb7AsRcjnPllyGPQYWVJvrxjEHctBpVu5vZU3GFfDJYZ-UQiATQQO6a4NOrCQ; _ssts_lr=1497191842; _sscn_up=2@up1@Z0yYriSmafQJ.suoMVpMYuRQi4F-dW0WWJEVhC.PRbvDS.P9ZkVGdX2gE.k.Y.Xjl4wMfAuuqW.iDDF1a6VuIvpvpUZl43niPT9rrSPKerdA7cycAK3yZzqntktd7m83
    Accept-Encoding: gzip
    Connection: Keep-Alive
     
     
    for the http download 
    X-Requested-With: XMLHttpRequest
    Host: api-secure.solvemedia.com
    Cookie: _sscn_a=fPjj9OOhrdeda8IDeo2c4eYy12wDiRrj; _sscn_b=2@b2@2ZeJCVAt94o6ny8mC-9KBeAN7Cl2jIKmzx08kOfeMbbeIEik55wzARftl7uFlwmtoMmb0wFaRN8bJXcSvGDq5MphWDYmlmgUZ8woceXRwxpSx4bbjul.zu1DMyJCasgNUno61Mdvg-gmXwmgwUMGORFTsXb7AsRcjnPllyGPQYWVJvrxjEHctBpVu5vZU3GFfDJYZ-UQiATQQO6a4NOrCQ; _ssts_lr=1497191842; _sscn_up=2@up1@Z0yYriSmafQJ.suoMVpMYuRQi4F-dW0WWJEVhC.PRbvDS.P9ZkVGdX2gE.k.Y.Xjl4wMfAuuqW.iDDF1a6VuIvpvpUZl43niPT9rrSPKerdA7cycAK3yZzqntktd7m83
     
  7. Hi there,

     

    Fellas can you scan one of your bots on virustotal.com and check what ratio are you getting? Compiled with rev 43

     


     

    Getting 18/60

     

    Isn't that a bit high? Maybe my PC is infected somehow ( tried from a clean Pc and fresh ubot as well, so this shouldn't be the case)

     

    Tried with a empty Ubot exe ( just with a navigate command in it) same shit.

     

    Looking forward in seeing your answers, 

    Ty

     

    did 2 more scans.

    empty ubot with just a navigate in it:

     

    Getting 18/60 as well

     


     


     

    18/60 as well rev 43

     

    e2: 

    Code Docta (Nick C.) ubotdocta.com Got 9/61 from a empty ubot ( just with navigate)

    "I compiled with .44

     


    9/61"

     

    If you compare our results, you will see that the same antiviruses provided different results! Why is that?

     

     

     

    e3: compiled with ubot last vers  rev 44


    9/61

  8. hmm, Looks like it was failing because I used licence.txt instead of licence.rtf, now it seems to be working.

     

    Its installing correctly the browser data in app data

    but Program File isn't adding the data correctly

     

    ex: the data from Program File should've been installed in C:\Program Files\SAT without other folders ( to the place where the bot exe was installed)

    but the installer is adding the data below

    C:\Program Files\SAT\C\Pash installer\Resource\Program File

                                        its creating these folders C\Pash installer\Resource\Program File and adding the data there

     

    http://i64.tinypic.com/jadf03.jpg

  9. Seems bugged, After its finished, I press show output folder, and its empty.

    I added everything correctly.

    exe, licence, banner, install icon, output

    browser and plugin in resources folder 

    Any idea why is doing this?

    e1: Tried using it in a VMware, same thing. Success! open output folder, and its emty

×
×
  • Create New...