Print Page - XAPO Script

Title: XAPO Script - Hacked
Post by: 5ub_zer0 on July 21, 2016, 06:33:11 PM

My Xapo-Faucet faucet.today got attaked .. as you can see in the list below .. my 30min timer is useless :-) ..

Here is my statement of account:
https://xapofau.xyz/wp-content/uploads/2016/07/Personal-Wallet_2016-07-21.csv (https://xapofau.xyz/wp-content/uploads/2016/07/Personal-Wallet_2016-07-21.csv)

Be careful all with the same script ...

Title: Re: XAPO Script - Hacked
Post by: vodaljepa on July 21, 2016, 06:49:29 PM

Is this the script Gifted was sharing with people on here?

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 21, 2016, 08:27:51 PM

hmm, i see my faucet is getting hit with a bot with same email address. I have been trying to figure out a way to stop this but any faucet can be hit with this tech.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 21, 2016, 08:32:54 PM

I think i need to add a timer to email and btc addresses not just ip

Title: Re: XAPO Script - Hacked
Post by: vodaljepa on July 21, 2016, 09:35:32 PM

Gifted you sure you aren't behind these attacks? I will investigate the code and see if any backdoor was planted by you

Title: Re: XAPO Script - Hacked
Post by: Salmen on July 21, 2016, 09:50:16 PM

Quote from: vodaljepa on July 21, 2016, 09:35:32 PM

Gifted you sure you aren't behind these attacks? I will investigate the code and see if any backdoor was planted by you

I just reviewed fast the code and couldn't see any backdoors.

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on July 22, 2016, 01:22:53 AM

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the user's IP is in, until now, I haven't been hit and I hope not ever.

Title: Re: XAPO Script - Hacked
Post by: torbente on July 22, 2016, 01:24:42 AM

Quote from: alfaboy23 on July 22, 2016, 01:22:53 AM

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the IP is in, until now, I haven't been hit and I hope not ever.

Which country ? Could you say?

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on July 22, 2016, 01:35:07 AM

Quote from: torbente on July 22, 2016, 01:24:42 AM

Quote from: alfaboy23 on July 22, 2016, 01:22:53 AM

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the IP is in, until now, I haven't been hit and I hope not ever.

Which country ? Could you say?

It's from Ind0nes!a.
But before I block that country, I first block the IP ranges he used, but he just uses another IP range, but still in that country :D , and he hit me for the second time with the same method.
That's the time that I decided to block the whole country or technically, just most IP's on that country.
The effect is I do not have any visitors from that country anymore.

Title: Re: XAPO Script - Hacked
Post by: Omegasun on July 22, 2016, 01:54:28 AM

Quote from: 5ub_zer0 on July 21, 2016, 06:33:11 PM

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 22, 2016, 11:40:11 AM

I assure you there is no back doors in the script but someone is always smarter then the next. we must join together to figure out a solution to this problem for the sake of everyone.

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 22, 2016, 01:20:19 PM

Quote from: Omegasun on July 22, 2016, 01:54:28 AM

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 23, 2016, 04:49:19 AM

Quote from: 5ub_zer0 on July 22, 2016, 01:20:19 PM

Quote from: Omegasun on July 22, 2016, 01:54:28 AM

Wait. you had no admin ??? how dd you setup your faucet without it?? Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip (http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip)

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 23, 2016, 07:09:15 AM

Quote from: Gifted on July 23, 2016, 04:49:19 AM

Quote from: 5ub_zer0 on July 22, 2016, 01:20:19 PM

Quote from: Omegasun on July 22, 2016, 01:54:28 AM

Wow! really! this would be great if you make a login page for a xapo faucet. I'm also using xapo faucet script and I have not had any problems with it. I'm happy using it. This is my first faucet I have ever created. You can check mine's faucet as well. http://viral-alert.com/xapo

If you ever created a login page for the script, I would love to share it with me. By the way do you know how to integrate antibot links to xapo faucet?

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 23, 2016, 04:44:53 PM

Quote from: Gifted on July 23, 2016, 04:49:19 AM

Sure there is admin ... and its a fork of the original Faucet-Builder what i written in the README ..but anyway everything on github can manipulated not only my one :-)

Yeah a login whould be nice ..

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 23, 2016, 05:33:52 PM

FYI - https://faucet.today is now online again .. with the version from gifted ..

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on July 23, 2016, 07:30:23 PM

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

Title: Re: XAPO Script - Hacked
Post by: Newcoins2020 on July 23, 2016, 08:19:30 PM

Quote from: sabotag3x on July 23, 2016, 07:30:23 PM

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

Collecting IP's is just the start, since proxy's are very cheap. Best way is to audit the script by a security expert.
If you don't do that, you run a risk being hacked and losing all your btc.
Best way is to make withdrawals manual if you are not sure about your scripts security.

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 23, 2016, 09:38:12 PM

This fu***ng Guy is back again .... now diabled reward system .. goin to sleep :-)

2016-07-23 21:28:30   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:29   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:19   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:19   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00001000   0.00001000      EUR   0.01   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:09   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:06   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:06   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:02   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:02   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:41   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:40   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:39   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:38   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:08   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:07   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:53   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:52   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:46   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:45   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:34   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:33   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:09   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:08   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:50   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:49   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:46   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:38   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:30   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:29   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:25   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:24   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:21   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:20   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:13   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:12   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:02   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:01   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:58   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:57   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:36   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:35   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:35   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:34   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:31   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:30   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:10   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 12:28:26 AM

Cant sleep .. two things are very strange in my opinion and maybe usefull for investigation.

1. if you see the List above .. this guy gets also the refferals (25%) ?? ..

2. i dit not see an armee of bots (with analytics or piwik) .. just one ip from ukraine has ~18 activites but without an referallink. The other ips looking normal ...

Anyway .. i closed the Faucet .. maybe reopen if it is secure

P.S: i used the script from gifted

---
Strange peoples in a strange world ...

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 12:36:08 AM

This is true, my site was attacked and a user zervo lemurian was able to claim every minute. I've disabled my api while investigate the issue. It's not something that it was hacked but it's something that they can reduce between the time of claim. If it's hacked for example they were able to get my xapo api key then they can still claim even I disabled the faucet. So we need to concentrate on the time of claim. Hopefully someone can help us.

Title: Re: XAPO Script - Hacked
Post by: FaucetRank.com on July 24, 2016, 10:41:38 AM

Quote from: 5ub_zer0 on July 24, 2016, 12:28:26 AM

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 11:10:09 AM

Quote from: FaucetRank.com on July 24, 2016, 10:41:38 AM

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

I never said that it is gifted .. just a information because i should give this/his version a try .. and the result was the same as with the original faucet-builder script i used in the first post.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 11:14:57 AM

Quote from: 5ub_zer0 on July 24, 2016, 11:10:09 AM

Quote from: FaucetRank.com on July 24, 2016, 10:41:38 AM

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

I never said that it is gifted .. just a information because i should give this/his version a try .. and the result was the same as with the original faucet-builder script i used in the first post.

I will investigate this problem and get back to you.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 12:13:11 PM

I want everyone to know i have found a solution 99% sure this will work but will take some time to write.. i should be done in a few hours and will be able to implement into your faucet i promise. no adding code, just upload into the root and thats it.. i will let you guys know when im done.

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 12:41:39 PM

Quote from: Gifted on July 24, 2016, 12:13:11 PM

I'm looking forward to it. Can you also make a script to ban email addresses? I have seen some that using multiple email addresses. It would be great if you can add setting to the admin page to block email address.

I recommend to check your phpmyadmin to see those are abusing the site. When I checked my database, I've seen a user that has over 50 email addresses that is why he was able to claim in my faucet every minute. Here are the email addresses. I think adding some setting to block email address in the admin panel would be great.

la.tu.gio@gmail.com
la.tu.gi.o@gmail.com
la.tu.g.io@gmail.com
la.tu.g.i.o@gmail.com
la.t.ugio@gmail.com
la.t.ugi.o@gmail.com
la.t.ug.io@gmail.com
la.t.u.gio@gmail.com
la.t.u.g.io@gmail.com
la.t.u.gi.o@gmail.com
la.t.ug.i.o@gmail.com
la.t.u.g.i.o@gmail.com
l.at.ugi.o@gmail.com
l.at.ug.io@gmail.com
l.at.ug.i.o@gmail.com
l.at.u.gio@gmail.com
l.at.u.gi.o@gmail.com
l.at.u.g.io@gmail.com
l.at.u.g.i.o@gmail.com
l.a.tugio@gmail.com
l.a.tugi.o@gmail.com
l.a.tug.io@gmail.com
lat.ugi.o@gmail.com
latugi.o@gmail.com
latug.io@gmail.com
latug.i.o@gmail.com
latu.gio@gmail.com
latu.gi.o@gmail.com
latu.g.io@gmail.com
latu.g.i.o@gmail.com
lat.ugio@gmail.com
lat.ug.io@gmail.com
lat.ug.i.o@gmail.com
lat.u.gio@gmail.com
lat.u.gi.o@gmail.com
lat.u.g.io@gmail.com
lat.u.g.i.o@gmail.com
la.tugio@gmail.com
la.tugi.o@gmail.com
la.tug.io@gmail.com
la.tug.i.o@gmail.com
l.atugi.o@gmail.com
l.atug.i.o@gmail.com
l.atu.gio@gmail.com
l.at.ugio@gmail.com
l.atu.g.i.o@gmail.com
l.atu.gi.o@gmail.com
l.atug.io@gmail.com
l.atugio@gmail.com

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 01:24:52 PM

Quote from: viralalert on July 24, 2016, 12:41:39 PM

Quote from: Gifted on July 24, 2016, 12:13:11 PM

That is impossible he would need that many xapo accounts and you will get a refund if account is not valid after so many days

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 01:26:25 PM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 01:34:34 PM

Quote from: Gifted on July 24, 2016, 01:26:25 PM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 01:54:13 PM

Quote from: viralalert on July 24, 2016, 01:34:34 PM

Quote from: Gifted on July 24, 2016, 01:26:25 PM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

it will show deducted but will be refunded if account is invalid.. i can remember how many days but it might be 15 days if i remember right.. Alfaboy knows that answer.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 01:55:15 PM

keep checking this post because i will be posting the download here soon for the fix

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 02:00:43 PM

Quote from: Gifted on July 24, 2016, 01:54:13 PM

Quote from: viralalert on July 24, 2016, 01:34:34 PM

Quote from: Gifted on July 24, 2016, 01:26:25 PM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

it will show deducted but will be refunded if account is invalid.. i can remember how many days but it might be 15 days if i remember right.. Alfaboy knows that answer.

HOw is it come that those email addresses have real names when I checked my xapo account. Having real names means that those accounts were verified. I have already contacted the support of xapo and I hope they can get back my bits taken from these email addresses.

Title: Re: XAPO Script - Hacked
Post by: FaucetRank.com on July 24, 2016, 02:05:21 PM

Quote from: Gifted on July 24, 2016, 01:54:13 PM

Quote from: viralalert on July 24, 2016, 01:34:34 PM

Quote from: Gifted on July 24, 2016, 01:26:25 PM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

it will show deducted but will be refunded if account is invalid.. i can remember how many days but it might be 15 days if i remember right.. Alfaboy knows that answer.

Although it is possible to create many accounts because with single xapo account we can add 4 extra emails (in total 5) and to create 50 emails you need 10 mobile numbers (sim cards).
I 4 accounts with 20 emails each account have 5 emails attached.

In case the scammer do not have those id then the amount should be refunded in your balance within 7 days as far I know.

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 03:15:56 PM

Quote from: Gifted on July 24, 2016, 01:55:15 PM

keep checking this post because i will be posting the download here soon for the fix

Can you also make an antibot links for xapo faucet?

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 04:25:13 PM

I have create a new .htaccess for the root but somewhere is a error give me time to find it.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 05:33:05 PM

I believe they are using tor to get around the timer.. this blocks all tor nodes.

Create a file named .htaccess in your root if you haven't already and add this code and

Code:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

deny from 143.177.42.35
deny from 163.172.138.68
deny from 159.148.186.194
deny from 162.247.72.201
deny from 1.234.89.222
deny from 176.10.104.240
deny from 188.120.231.199
deny from 66.214.209.211
deny from 95.85.20.243
deny from 93.174.93.133
deny from 193.90.12.87
deny from 193.171.202.150
deny from 171.25.193.132
deny from 217.12.201.109
deny from 217.13.197.5
deny from 106.187.37.101
deny from 91.199.149.139
deny from 185.100.85.61
deny from 146.0.43.126
deny from 46.242.2.30
deny from 46.182.106.190
deny from 79.136.42.226
deny from 78.142.175.70
deny from 216.218.134.12
deny from 185.97.32.18
deny from 198.143.136.228
deny from 84.195.229.182
deny from 216.230.148.77
deny from 31.220.43.179
deny from 84.19.179.229
deny from 85.93.218.204
deny from 88.167.163.142
deny from 77.247.181.162
deny from 109.190.200.97
deny from 185.65.200.93
deny from 162.243.75.204
deny from 185.29.9.249
deny from 46.188.59.141
deny from 92.222.74.226
deny from 78.142.19.171
deny from 46.183.216.180
deny from 37.134.198.85
deny from 185.80.129.131
deny from 36.229.232.86
deny from 167.88.40.130
deny from 162.247.72.216
deny from 185.16.200.176
deny from 77.98.204.3
deny from 46.183.221.231
deny from 95.140.42.183
deny from 65.19.167.131
deny from 178.17.170.179
deny from 31.220.42.233
deny from 185.100.86.100
deny from 62.149.25.15
deny from 80.162.43.72
deny from 84.200.122.104
deny from 77.247.181.162
deny from 194.104.0.100
deny from 77.21.86.217
deny from 72.52.75.27
deny from 37.48.124.116
deny from 163.172.143.114
deny from 24.151.116.8
deny from 65.19.167.132
deny from 176.10.99.205
deny from 83.141.2.52
deny from 85.214.11.209
deny from 86.145.75.30
deny from 185.86.148.27
deny from 217.23.7.25
deny from 217.23.7.99
deny from 5.206.225.89
deny from 178.239.167.15
deny from 185.100.84.108
deny from 77.81.240.41
deny from 148.163.73.85
deny from 93.115.95.206
deny from 37.48.109.23
deny from 85.17.177.73
deny from 217.115.10.132
deny from 148.163.73.85
deny from 91.146.121.3
deny from 46.235.226.226
deny from 185.16.173.84
deny from 188.65.144.2
deny from 80.201.18.151
deny from 171.25.193.25
deny from 204.11.50.131
deny from 185.62.103.97
deny from 93.129.46.234
deny from 185.86.148.51
deny from 185.65.135.227
deny from 186.48.47.145
deny from 87.236.215.83
deny from 178.62.97.134
deny from 85.10.211.53
deny from 185.44.228.152
deny from 149.62.148.41
deny from 81.89.0.202
deny from 91.231.86.101
deny from 5.189.140.238
deny from 188.40.37.205
deny from 93.115.95.202
deny from 185.109.146.62
deny from 87.120.254.135
deny from 103.10.197.50
deny from 109.238.6.97
deny from 85.143.202.64
deny from 78.245.53.147
deny from 92.111.156.14
deny from 91.219.237.229
deny from 65.181.123.72
deny from 176.10.99.208
deny from 198.73.50.71
deny from 5.9.146.203
deny from 91.219.236.218
deny from 5.28.62.85
deny from 163.172.209.46
deny from 109.163.234.8
deny from 199.68.196.126
deny from 80.255.3.122
deny from 109.230.238.165
deny from 109.120.180.245
deny from 176.123.29.244
deny from 31.192.228.185
deny from 85.25.103.69
deny from 163.172.134.238
deny from 188.166.127.251
deny from 96.35.130.134
deny from 89.31.96.168
deny from 178.17.170.164
deny from 151.80.164.147
deny from 176.10.99.206
deny from 185.61.148.228
deny from 67.215.255.140
deny from 50.245.124.131
deny from 46.188.10.23
deny from 163.172.134.39
deny from 97.107.142.28
deny from 81.89.0.200
deny from 195.12.190.38
deny from 94.23.147.30
deny from 66.155.4.213
deny from 59.179.17.195
deny from 217.23.7.25
deny from 217.23.7.98
deny from 46.101.131.240
deny from 37.48.124.116
deny from 37.48.124.117
deny from 94.23.1.79
deny from 173.14.173.227
deny from 158.69.244.40
deny from 185.65.132.121
deny from 185.65.132.106
deny from 31.220.42.229
deny from 31.220.45.142
deny from 103.3.61.114
deny from 76.164.224.66
deny from 198.58.107.53
deny from 108.28.164.248
deny from 185.62.190.108
deny from 194.150.168.79
deny from 212.47.236.79
deny from 188.53.48.145
deny from 46.101.197.155
deny from 46.183.85.124
deny from 150.107.29.57
deny from 91.138.66.57
deny from 76.164.202.122
deny from 46.21.107.230
deny from 87.236.195.185
deny from 163.22.17.41
deny from 150.107.150.101
deny from 176.10.99.200
deny from 173.208.213.114
deny from 189.84.21.44
deny from 199.180.115.100
deny from 208.78.254.197
deny from 69.164.209.8
deny from 162.243.162.152
deny from 91.213.8.235
deny from 85.143.219.211
deny from 184.105.220.24
deny from 176.10.99.206
deny from 85.230.108.179
deny from 5.34.183.72
deny from 149.202.62.12
deny from 37.187.239.8
deny from 46.72.91.96
deny from 92.222.71.173
deny from 110.174.43.136
deny from 64.137.242.231
deny from 45.62.251.146
deny from 120.56.173.221
deny from 178.18.83.215
deny from 97.74.237.196
deny from 185.100.86.86
deny from 46.166.138.161
deny from 31.220.43.201
deny from 31.220.45.148
deny from 93.174.90.30
deny from 80.78.241.189
deny from 212.47.248.194
deny from 62.80.200.19
deny from 154.127.60.92
deny from 95.215.44.194
deny from 78.142.19.213
deny from 195.154.251.25
deny from 64.113.32.29
deny from 86.145.75.30
deny from 178.151.182.123
deny from 128.199.87.155
deny from 163.172.38.173
deny from 217.12.204.104
deny from 37.48.101.193
deny from 178.7.6.224
deny from 67.61.212.199
deny from 45.62.225.248
deny from 45.55.178.34
deny from 162.247.73.74
deny from 178.17.174.99
deny from 37.134.41.23
deny from 85.207.155.39
deny from 203.217.173.146
deny from 93.115.241.2
deny from 83.34.175.129
deny from 93.95.100.185
deny from 128.199.251.186
deny from 80.198.105.184
deny from 46.233.0.70
deny from 94.31.53.203
deny from 118.163.74.161
deny from 178.235.61.35
deny from 173.254.216.66
deny from 37.218.240.101
deny from 205.168.84.133
deny from 185.73.44.58
deny from 62.210.178.177
deny from 103.41.177.49
deny from 78.247.15.126
deny from 82.161.210.87
deny from 45.32.155.33
deny from 121.127.250.156
deny from 176.10.99.207
deny from 109.87.69.138
deny from 176.126.252.12
deny from 217.23.7.25
deny from 217.23.7.98
deny from 204.17.56.42
deny from 104.167.113.138
deny from 75.164.122.150
deny from 109.236.82.205
deny from 109.236.82.206
deny from 84.92.97.97
deny from 193.90.12.88
deny from 77.170.230.163
deny from 93.113.36.242
deny from 176.31.200.122
deny from 92.243.69.105
deny from 104.168.154.70
deny from 198.50.191.95
deny from 195.154.90.122
deny from 87.98.250.222
deny from 195.40.181.35
deny from 92.222.22.113
deny from 185.62.190.108
deny from 200.63.47.10
deny from 178.17.173.22
deny from 213.109.53.16
deny from 41.249.189.224
deny from 82.211.0.201
deny from 78.41.115.145
deny from 85.25.44.141
deny from 217.23.13.129
deny from 78.142.19.213
deny from 149.202.42.188
deny from 176.10.107.180
deny from 91.229.77.64
deny from 50.247.195.124
deny from 178.65.148.40
deny from 148.251.255.92
deny from 109.162.114.241
deny from 176.10.99.201
deny from 176.10.99.204
deny from 109.63.191.21
deny from 212.83.40.239
deny from 176.9.165.151
deny from 94.23.150.95
deny from 188.214.129.85
deny from 94.103.175.86
deny from 84.45.76.10
deny from 162.248.10.132
deny from 84.45.76.11
deny from 128.199.52.7
deny from 111.90.44.191
deny from 88.198.56.140
deny from 188.165.59.43
deny from 185.62.190.38
deny from 89.212.213.125
deny from 165.255.105.156
deny from 37.48.109.107
deny from 178.17.170.238
deny from 206.248.184.127
deny from 81.89.0.203
deny from 90.146.215.143
deny from 148.163.73.85
deny from 148.163.73.86
deny from 37.48.101.193
deny from 81.7.11.70
deny from 46.16.234.131
deny from 175.203.72.59
deny from 178.238.223.67
deny from 209.159.138.19
deny from 78.31.164.41
deny from 128.199.180.255
deny from 92.78.180.156
deny from 5.39.217.14
deny from 37.48.101.193
deny from 95.211.226.243
deny from 5.196.143.10
deny from 45.33.48.204
deny from 116.50.219.104
deny from 198.211.112.190
deny from 104.245.233.128
deny from 69.162.139.9
deny from 178.254.31.209
deny from 62.21.63.254
deny from 176.126.252.11
deny from 80.67.172.162
deny from 23.95.113.5
deny from 162.247.72.202
deny from 162.213.0.243
deny from 176.31.7.241
deny from 103.199.16.58
deny from 192.195.80.10
deny from 109.230.217.148
deny from 62.102.148.67
deny from 87.198.35.232
deny from 217.23.7.25
deny from 217.23.7.79
deny from 212.21.66.6
deny from 104.168.154.6
deny from 35.0.127.52
deny from 163.172.43.52
deny from 4.31.64.70
deny from 82.140.225.108
deny from 84.200.82.163
deny from 199.127.226.150
deny from 2.111.70.28
deny from 212.92.219.15
deny from 185.36.100.145
deny from 91.138.20.41
deny from 77.247.181.163
deny from 185.62.190.172
deny from 104.130.169.121
deny from 128.199.195.231
deny from 106.186.28.33
deny from 37.59.42.55
deny from 212.19.17.213
deny from 217.23.14.168
deny from 217.23.14.190
deny from 87.19.18.168
deny from 139.162.16.105
deny from 79.98.107.90
deny from 80.79.23.7
deny from 31.220.42.229
deny from 31.220.45.142
deny from 162.247.73.204
deny from 91.240.66.134
deny from 27.50.94.251
deny from 185.104.120.2
deny from 109.236.90.209
deny from 5.10.46.136
deny from 216.75.21.31
deny from 63.223.69.103
deny from 150.107.150.102
deny from 45.62.229.165
deny from 192.160.102.166
deny from 82.221.139.25
deny from 198.74.60.131
deny from 158.69.185.170
deny from 59.177.81.30
deny from 167.88.46.205
deny from 89.163.135.98
deny from 46.194.136.171
deny from 46.249.37.143
deny from 104.167.101.223
deny from 109.163.234.9
deny from 89.234.157.254
deny from 117.18.75.235
deny from 185.73.44.54
deny from 176.114.1.248
deny from 93.219.113.185
deny from 46.101.229.169
deny from 193.15.16.4
deny from 45.79.207.176
deny from 101.98.11.146
deny from 91.219.236.131
deny from 91.82.237.127
deny from 163.172.214.76
deny from 50.31.252.11
deny from 35.0.127.52
deny from 104.233.83.9
deny from 177.85.98.227
deny from 81.89.0.198
deny from 193.90.12.90
deny from 193.107.85.62
deny from 109.163.234.5
deny from 95.130.12.91
deny from 51.255.202.66
deny from 185.17.144.138
deny from 37.187.129.166
deny from 37.0.127.44
deny from 31.185.27.1
deny from 104.233.108.157
deny from 198.23.161.144
deny from 87.98.250.244
deny from 207.244.70.35
deny from 185.17.184.228
deny from 120.29.217.46
deny from 78.108.66.110
deny from 85.90.244.52
deny from 5.135.211.179
deny from 5.196.39.63
deny from 37.187.220.151
deny from 213.161.5.12
deny from 212.117.180.137
deny from 93.115.95.204
deny from 75.127.4.6
deny from 107.170.232.75
deny from 37.48.124.116
deny from 37.48.124.117
deny from 64.137.206.52
deny from 193.90.12.89
deny from 84.48.199.78
deny from 74.50.54.69
deny from 178.62.60.187
deny from 198.100.155.54
deny from 65.181.118.10
deny from 5.135.158.101
deny from 176.10.99.202
deny from 95.128.43.164
deny from 85.25.103.119
deny from 75.58.3.232
deny from 109.236.89.207
deny from 193.90.12.86
deny from 159.203.11.12
deny from 62.149.12.153
deny from 198.46.142.47
deny from 95.183.52.174
deny from 62.212.73.141
deny from 89.187.142.208
deny from 82.211.19.143
deny from 77.247.181.165
deny from 104.131.206.23
deny from 185.112.156.38
deny from 23.227.183.244
deny from 185.61.138.125
deny from 64.27.17.140
deny from 94.199.51.101
deny from 37.187.129.166
deny from 193.107.85.61
deny from 212.47.227.114
deny from 109.236.89.202
deny from 103.8.79.229
deny from 109.194.219.118
deny from 179.43.143.162
deny from 192.155.95.222
deny from 213.108.105.71
deny from 5.189.146.133
deny from 217.23.7.25
deny from 217.23.7.99
deny from 94.100.6.27
deny from 176.10.99.204
deny from 65.181.112.128
deny from 71.19.157.127
deny from 109.163.234.4
deny from 5.199.130.188
deny from 109.236.89.202
deny from 95.130.11.147
deny from 37.187.176.64
deny from 86.110.174.22
deny from 89.238.77.4
deny from 84.72.168.92
deny from 109.126.9.228
deny from 185.61.138.178
deny from 162.247.72.27
deny from 195.154.15.227
deny from 79.134.255.200
deny from 46.23.72.81
deny from 92.243.30.98
deny from 86.20.43.131
deny from 82.211.19.129
deny from 192.42.115.102
deny from 162.220.246.230
deny from 185.100.85.147
deny from 162.247.73.206
deny from 46.4.55.177
deny from 78.47.246.35
deny from 62.210.37.82
deny from 84.200.56.36
deny from 120.56.175.238
deny from 185.104.120.3
deny from 217.12.199.209
deny from 95.154.24.73
deny from 89.34.237.12
deny from 37.59.72.135
deny from 108.32.49.20
deny from 178.17.170.238
deny from 60.248.162.179
deny from 149.91.82.166
deny from 46.29.248.238
deny from 51.254.215.7
deny from 89.34.237.11
deny from 62.210.105.116
deny from 138.219.43.141
deny from 37.134.41.23
deny from 84.149.71.120
deny from 176.126.85.175
deny from 188.126.81.155
deny from 94.26.140.150
deny from 195.123.209.184
deny from 128.199.59.20
deny from 103.210.210.33
deny from 162.247.72.217
deny from 37.48.81.27
deny from 86.7.140.31
deny from 167.114.77.222
deny from 79.134.234.247
deny from 159.148.186.194
deny from 84.158.211.52
deny from 213.136.71.21
deny from 204.194.29.4
deny from 164.132.51.91
deny from 185.11.180.67
deny from 171.25.193.131
deny from 139.162.10.72
deny from 176.37.40.213
deny from 154.127.61.249
deny from 62.210.129.246
deny from 45.62.246.184
deny from 108.61.122.70
deny from 88.200.73.100
deny from 37.59.63.190
deny from 176.58.89.182
deny from 5.196.121.161
deny from 77.247.181.162
deny from 46.194.136.171
deny from 204.85.191.30
deny from 176.10.99.208
deny from 176.10.99.201
deny from 185.100.84.82
deny from 163.172.209.226
deny from 46.246.93.70
deny from 199.87.154.251
deny from 176.123.26.42
deny from 89.31.57.5
deny from 13.90.214.85
deny from 46.41.132.84
deny from 211.76.55.92
deny from 73.158.211.143
deny from 178.82.173.159
deny from 83.160.95.99
deny from 141.138.141.208
deny from 104.40.1.143
deny from 37.220.10.147
deny from 185.106.120.92
deny from 185.69.168.112
deny from 213.61.149.100
deny from 176.214.5.209
deny from 185.100.85.192
deny from 195.254.135.76
deny from 185.117.82.132
deny from 192.42.116.16
deny from 91.213.8.84
deny from 192.160.102.164
deny from 104.233.95.49
deny from 111.69.147.178
deny from 194.166.66.58
deny from 46.28.68.158
deny from 51.9.90.252
deny from 2.242.156.225
deny from 5.189.188.111
deny from 192.87.28.82
deny from 91.59.90.10
deny from 45.62.234.225
deny from 94.23.252.31
deny from 216.17.110.252
deny from 162.247.72.213
deny from 104.168.62.207
deny from 80.241.60.207
deny from 94.23.1.79
deny from 40.118.65.243
deny from 91.8.45.18
deny from 46.235.227.70
deny from 91.228.151.52
deny from 212.47.226.184
deny from 37.48.64.20
deny from 5.9.195.140
deny from 176.10.104.243
deny from 89.163.237.45
deny from 87.118.84.181
deny from 194.74.181.78
deny from 65.19.167.130
deny from 91.233.106.121
deny from 78.130.128.106
deny from 84.200.56.34
deny from 69.70.103.202
deny from 81.89.0.204
deny from 213.95.21.54
deny from 31.220.43.201
deny from 91.109.29.120
deny from 193.107.85.56
deny from 213.61.149.100
deny from 51.255.38.226
deny from 94.23.201.80
deny from 151.80.38.15
deny from 149.56.99.37
deny from 178.17.170.124
deny from 91.213.8.236
deny from 82.221.129.96
deny from 45.62.250.113
deny from 217.23.14.168
deny from 163.172.43.52
deny from 80.67.172.162
deny from 91.219.236.232
deny from 163.172.140.30
deny from 5.196.39.63
deny from 37.187.220.151
deny from 5.79.68.161
deny from 46.162.192.166
deny from 79.172.193.32
deny from 173.8.103.243
deny from 178.238.237.44
deny from 89.234.157.254
deny from 59.177.65.36
deny from 95.215.44.186
deny from 217.12.199.70
deny from 108.61.122.88
deny from 83.12.197.137
deny from 185.100.86.171
deny from 70.164.255.174
deny from 185.128.40.220
deny from 195.112.107.226
deny from 91.219.237.244
deny from 178.32.53.131
deny from 31.31.74.47
deny from 37.218.240.50
deny from 178.33.26.3
deny from 141.255.189.161
deny from 162.221.202.230
deny from 157.97.16.20
deny from 204.8.156.142
deny from 1.234.7.62
deny from 5.249.145.164
deny from 93.115.241.194
deny from 87.118.92.43
deny from 188.93.234.203
deny from 176.10.104.243
deny from 185.66.200.10
deny from 93.64.207.55
deny from 176.126.85.176
deny from 84.45.76.12
deny from 80.244.81.191
deny from 185.100.86.154
deny from 31.220.43.179
deny from 190.10.8.50
deny from 163.172.154.105
deny from 149.56.99.38
deny from 198.50.200.131
deny from 173.255.229.8
deny from 168.235.155.246
deny from 212.47.246.21
deny from 46.167.245.51
deny from 37.187.19.140
deny from 37.233.99.157
deny from 208.83.83.100
deny from 72.5.72.225
deny from 50.76.159.218
deny from 18.248.1.85
deny from 185.100.86.128
deny from 95.42.48.4
deny from 91.219.238.77
deny from 95.142.161.63
deny from 37.48.120.196
deny from 185.100.87.214
deny from 78.142.19.172
deny from 94.210.0.28
deny from 93.115.95.201
deny from 151.1.182.128
deny from 212.117.180.21
deny from 72.14.179.10
deny from 68.71.46.138
deny from 31.185.104.19
deny from 146.185.177.103
deny from 37.49.15.75
deny from 83.238.163.214
deny from 77.81.104.124
deny from 185.100.85.190
deny from 81.89.0.195
deny from 91.121.192.154
deny from 62.133.130.105
deny from 37.187.21.180
deny from 45.62.236.201
deny from 68.235.60.187
deny from 176.31.215.157
deny from 46.165.230.5
deny from 5.196.58.96
deny from 171.25.193.77
deny from 92.222.77.245
deny from 74.207.248.110
deny from 77.40.57.177
deny from 185.100.86.167
deny from 173.255.226.142
deny from 185.129.62.63
deny from 171.25.193.78
deny from 217.23.7.25
deny from 185.86.78.67
deny from 185.15.72.55
deny from 46.39.102.250
deny from 209.58.176.42
deny from 128.52.128.105
deny from 178.252.28.200
deny from 47.90.39.120
deny from 46.183.218.199
deny from 41.206.188.206
deny from 176.67.168.210
deny from 82.5.254.105
deny from 162.247.72.200
deny from 178.175.128.50
deny from 109.236.89.207
deny from 176.10.99.207
deny from 188.40.178.5
deny from 85.159.237.210
deny from 94.142.242.84
deny from 81.89.0.197
deny from 91.138.20.28
deny from 187.104.63.197
deny from 195.62.53.58
deny from 85.158.152.122
deny from 176.9.145.194
deny from 5.79.70.174
deny from 92.222.6.12
deny from 23.239.10.144
deny from 87.98.178.61
deny from 81.89.0.196
deny from 84.3.0.53
deny from 185.129.62.62
deny from 92.222.88.7
deny from 176.10.99.203
deny from 185.35.138.92
deny from 176.10.104.240
deny from 46.165.223.217
deny from 147.175.187.143
deny from 45.32.39.157
deny from 93.89.101.27
deny from 81.89.0.201
deny from 50.7.151.127
deny from 37.187.7.74
deny from 120.56.161.113
deny from 54.197.2.129
deny from 91.203.5.165
deny from 193.150.121.68
deny from 85.31.101.98
deny from 185.61.149.41
deny from 95.131.234.2
deny from 104.232.3.33
deny from 5.196.66.162
deny from 37.48.101.193
deny from 95.211.226.242
deny from 45.62.255.94
deny from 217.115.10.131
deny from 176.126.252.11
deny from 93.115.95.216
deny from 213.243.144.227
deny from 80.82.64.15
deny from 192.42.115.101
deny from 185.61.148.163
deny from 93.115.95.207
deny from 217.23.7.25
deny from 86.253.69.197
deny from 162.247.72.199
deny from 173.236.255.142
deny from 176.126.84.202
deny from 108.211.227.232
deny from 103.236.201.110
deny from 31.220.43.179
deny from 149.56.99.36
deny from 109.163.234.2
deny from 79.211.39.220
deny from 46.101.123.195
deny from 178.175.131.194
deny from 41.212.37.123
deny from 185.100.85.191
deny from 178.17.170.253
deny from 179.43.146.230
deny from 94.221.106.215
deny from 31.17.187.7
deny from 163.172.38.175
deny from 199.87.154.255
deny from 31.220.43.190
deny from 5.79.68.161
deny from 85.143.95.50
deny from 85.248.227.164
deny from 71.135.34.171
deny from 176.10.99.209
deny from 62.210.85.207
deny from 46.21.150.202
deny from 185.100.85.132
deny from 47.90.39.41
deny from 146.185.150.219
deny from 45.32.244.70
deny from 185.62.190.172
deny from 94.102.53.177
deny from 103.240.91.7
deny from 128.153.145.125
deny from 107.182.131.117
deny from 90.171.234.112
deny from 93.115.83.243
deny from 71.46.220.68
deny from 51.254.218.90
deny from 197.231.221.211
deny from 88.217.171.225
deny from 185.8.60.92
deny from 198.96.155.3
deny from 87.252.5.163
deny from 46.242.66.240
deny from 37.220.36.240
deny from 176.10.99.209
deny from 80.169.241.76
deny from 139.59.134.30
deny from 94.198.100.17
deny from 188.209.52.109
deny from 163.172.214.76
deny from 104.167.117.75
deny from 91.219.236.136
deny from 94.100.6.6
deny from 208.111.35.80
deny from 46.226.108.26
deny from 89.47.212.53
deny from 174.96.151.41
deny from 89.187.143.81
deny from 5.196.39.63
deny from 5.196.39.57
deny from 37.59.112.7
deny from 31.220.43.190
deny from 192.99.125.120
deny from 185.100.87.120
deny from 94.102.50.42
deny from 217.23.14.168
deny from 217.23.14.190
deny from 176.10.99.205
deny from 185.65.132.121
deny from 185.65.132.106
deny from 84.53.232.154
deny from 46.36.36.108
deny from 109.163.234.7
deny from 166.70.15.14
deny from 213.186.7.232
deny from 121.54.175.50
deny from 82.66.140.131
deny from 93.95.228.125
deny from 95.163.107.14
deny from 162.248.164.71
deny from 153.92.44.90
deny from 105.158.113.23
deny from 178.20.55.18
deny from 109.236.82.205
deny from 176.126.85.176
deny from 5.135.85.23
deny from 188.129.72.32
deny from 193.107.85.57
deny from 177.18.197.254
deny from 179.0.194.199
deny from 176.126.252.11
deny from 80.67.172.162
deny from 45.62.238.53
deny from 178.17.174.31
deny from 188.78.214.153
deny from 85.248.227.163
deny from 193.111.136.162
deny from 104.167.102.244
deny from 93.158.215.174
deny from 177.85.98.227
deny from 192.151.155.130
deny from 80.162.43.72
deny from 212.7.219.155
deny from 124.25.216.117
deny from 202.169.30.18
deny from 192.160.102.164
deny from 74.142.74.156
deny from 80.248.208.131
deny from 5.61.34.63
deny from 163.172.138.68
deny from 185.100.85.236
deny from 176.9.165.146
deny from 80.162.43.72
deny from 66.180.193.219
deny from 37.48.64.20
deny from 176.126.85.175
deny from 185.82.216.129
deny from 5.146.204.188
deny from 93.158.215.174
deny from 5.61.34.63
deny from 192.34.80.176
deny from 108.166.168.158
deny from 91.234.226.35
deny from 201.68.215.52
deny from 176.9.165.149
deny from 5.135.65.145
deny from 46.188.50.48
deny from 77.247.181.162
deny from 176.10.99.204
deny from 76.85.200.64
deny from 5.43.154.178
deny from 207.192.69.165
deny from 178.17.163.82
deny from 162.243.99.72
deny from 41.223.53.141
deny from 213.95.21.59
deny from 66.85.131.72
deny from 151.80.164.147
deny from 177.9.229.167
deny from 162.248.11.176
deny from 46.28.110.136
deny from 37.48.80.101
deny from 69.164.207.234
deny from 93.115.95.204
deny from 85.159.237.210
deny from 185.29.8.132
deny from 199.68.196.124
deny from 172.97.103.47
deny from 107.181.174.84
deny from 185.100.86.69
deny from 212.47.243.140
deny from 216.17.99.183
deny from 213.64.199.191
deny from 2.24.162.24
deny from 192.42.113.102
deny from 198.50.200.135
deny from 185.25.51.10
deny from 185.34.33.2
deny from 163.22.17.40
deny from 46.101.169.151
deny from 87.81.148.61
deny from 95.163.107.15
deny from 195.169.125.226
deny from 176.116.104.49
deny from 104.208.241.245
deny from 37.187.129.166
deny from 37.48.124.116
deny from 185.61.138.125
deny from 89.177.115.75
deny from 185.62.190.38
deny from 136.0.2.131
deny from 84.45.76.13
deny from 96.35.130.133
deny from 213.92.225.70
deny from 159.203.15.136
deny from 82.128.249.249
deny from 104.233.115.217
deny from 172.245.32.186
deny from 85.248.227.165
deny from 198.51.75.165
deny from 78.193.86.3
deny from 163.172.152.231
deny from 90.231.152.159
deny from 185.58.226.61
deny from 91.213.8.64
deny from 62.212.84.229
deny from 96.35.130.131
deny from 185.63.67.142
deny from 109.169.33.163
deny from 80.240.139.111
deny from 185.135.156.94
deny from 171.25.193.20
deny from 78.106.17.112
deny from 83.236.208.78
deny from 178.17.170.179
deny from 80.255.6.11
deny from 185.100.87.82
deny from 172.245.32.185
deny from 92.222.38.67
deny from 94.242.57.2
deny from 203.161.103.17
deny from 89.35.178.104
deny from 89.207.129.150
deny from 5.39.86.206
deny from 212.24.144.188
deny from 77.51.7.71
deny from 188.209.52.109
deny from 178.63.97.34
deny from 80.67.190.200
deny from 62.210.178.177
deny from 162.244.25.249
deny from 5.199.142.195
deny from 185.80.130.125
deny from 212.26.245.34
deny from 31.131.4.167
deny from 46.182.18.111
deny from 176.10.99.202
deny from 94.100.6.68
deny from 92.222.28.243
deny from 166.70.207.2
deny from 45.62.226.60
deny from 72.95.12.53
deny from 78.24.217.129
deny from 162.247.72.7
deny from 192.187.123.125
deny from 93.115.95.205
deny from 162.243.100.225
deny from 37.235.53.233
deny from 104.233.120.108
deny from 176.31.180.157
deny from 188.226.192.48
deny from 176.58.100.98
deny from 59.127.163.155
deny from 37.143.180.18
deny from 88.184.58.54
deny from 162.244.26.76
deny from 87.236.194.23
deny from 185.100.85.176
deny from 173.254.216.66
deny from 212.7.192.148
deny from 78.142.19.172
deny from 81.170.184.90
deny from 45.32.244.70
deny from 46.166.167.38
deny from 172.98.67.120
deny from 51.255.201.163
deny from 109.200.130.62
deny from 88.198.14.171
deny from 176.10.99.200
deny from 94.242.246.24
deny from 178.62.71.57
deny from 91.219.236.222
deny from 46.246.49.92
deny from 171.25.193.235
deny from 159.203.13.157
deny from 108.61.212.102
deny from 173.255.196.30
deny from 192.87.28.28
deny from 82.221.128.217
deny from 154.127.61.134
deny from 199.68.196.125
deny from 198.100.148.112
deny from 91.220.220.5
deny from 210.211.122.204
deny from 88.208.208.34
deny from 54.211.96.251
deny from 158.130.0.242
deny from 198.167.223.38
deny from 149.202.98.160
deny from 178.20.55.16
deny from 94.155.49.47
deny from 82.248.39.125
deny from 188.187.149.202
deny from 45.79.85.112
deny from 90.146.34.158
deny from 185.61.149.193
deny from 82.221.139.129
deny from 103.56.207.84
deny from 194.218.3.79
deny from 5.135.199.14
deny from 178.32.251.105
deny from 89.33.246.114
deny from 65.181.123.254
deny from 5.9.158.75
deny from 198.50.200.137
deny from 167.114.238.104
deny from 89.34.237.101
deny from 5.255.80.27
deny from 103.37.128.253
deny from 5.56.133.19
deny from 31.220.42.229
deny from 193.33.216.23
deny from 91.250.241.241
deny from 212.83.40.238
deny from 46.72.24.206
deny from 193.150.121.66
deny from 51.255.33.0
deny from 31.220.43.201
deny from 31.220.45.148
deny from 109.173.58.146
deny from 77.247.181.165
deny from 94.242.246.23
deny from 194.187.249.135
deny from 139.162.144.133
deny from 37.59.14.201
deny from 154.70.153.175
deny from 195.154.165.246
deny from 198.74.60.82
deny from 87.236.215.72
deny from 185.104.120.4
deny from 81.89.0.199
deny from 31.220.43.190
deny from 212.47.244.193
deny from 83.233.161.228
deny from 163.172.136.101
deny from 76.20.224.162
deny from 149.202.98.161
deny from 163.172.211.135
deny from 185.86.148.206
deny from 104.131.43.59
deny from 93.115.95.204
deny from 85.159.237.210
deny from 164.132.42.182
deny from 176.31.7.241
deny from 95.211.205.151
deny from 64.137.215.208
deny from 178.209.50.151
deny from 104.237.152.195
deny from 217.103.164.150
deny from 178.32.53.94


<IfModule mod_mime.c>
    AddType text/css .css
    AddType text/x-component .htc
    AddType application/x-javascript .js
    AddType application/javascript .js2
    AddType text/javascript .js3
    AddType text/x-js .js4
    AddType text/html .html .htm
    AddType text/richtext .rtf .rtx
    AddType image/svg+xml .svg .svgz
    AddType text/plain .txt
    AddType text/xsd .xsd
    AddType text/xsl .xsl
    AddType text/xml .xml
    AddType video/asf .asf .asx .wax .wmv .wmx
    AddType video/avi .avi
    AddType image/bmp .bmp
    AddType application/java .class
    AddType video/divx .divx
    AddType application/msword .doc .docx
    AddType application/vnd.ms-fontobject .eot
    AddType application/x-msdownload .exe
    AddType image/gif .gif
    AddType application/x-gzip .gz .gzip
    AddType image/x-icon .ico
    AddType image/jpeg .jpg .jpeg .jpe
    AddType application/json .json
    AddType application/vnd.ms-access .mdb
    AddType audio/midi .mid .midi
    AddType video/quicktime .mov .qt
    AddType audio/mpeg .mp3 .m4a
    AddType video/mp4 .mp4 .m4v
    AddType video/mpeg .mpeg .mpg .mpe
    AddType application/vnd.ms-project .mpp
    AddType application/x-font-otf .otf
    AddType application/vnd.ms-opentype .otf
    AddType application/vnd.oasis.opendocument.database .odb
    AddType application/vnd.oasis.opendocument.chart .odc
    AddType application/vnd.oasis.opendocument.formula .odf
    AddType application/vnd.oasis.opendocument.graphics .odg
    AddType application/vnd.oasis.opendocument.presentation .odp
    AddType application/vnd.oasis.opendocument.spreadsheet .ods
    AddType application/vnd.oasis.opendocument.text .odt
    AddType audio/ogg .ogg
    AddType application/pdf .pdf
    AddType image/png .png
    AddType application/vnd.ms-powerpoint .pot .pps .ppt .pptx
    AddType audio/x-realaudio .ra .ram
    AddType application/x-shockwave-flash .swf
    AddType application/x-tar .tar
    AddType image/tiff .tif .tiff
    AddType application/x-font-ttf .ttf .ttc
    AddType application/vnd.ms-opentype .ttf .ttc
    AddType audio/wav .wav
    AddType audio/wma .wma
    AddType application/vnd.ms-write .wri
    AddType application/font-woff .woff
    AddType application/vnd.ms-excel .xla .xls .xlsx .xlt .xlw
    AddType application/zip .zip
</IfModule>
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css A31536000
    ExpiresByType text/x-component A31536000
    ExpiresByType application/x-javascript A31536000
    ExpiresByType application/javascript A31536000
    ExpiresByType text/javascript A31536000
    ExpiresByType text/x-js A31536000
    ExpiresByType text/html A3600
    ExpiresByType text/richtext A3600
    ExpiresByType image/svg+xml A3600
    ExpiresByType text/plain A3600
    ExpiresByType text/xsd A3600
    ExpiresByType text/xsl A3600
    ExpiresByType text/xml A3600
    ExpiresByType video/asf A31536000
    ExpiresByType video/avi A31536000
    ExpiresByType image/bmp A31536000
    ExpiresByType application/java A31536000
    ExpiresByType video/divx A31536000
    ExpiresByType application/msword A31536000
    ExpiresByType application/vnd.ms-fontobject A31536000
    ExpiresByType application/x-msdownload A31536000
    ExpiresByType image/gif A31536000
    ExpiresByType application/x-gzip A31536000
    ExpiresByType image/x-icon A31536000
    ExpiresByType image/jpeg A31536000
    ExpiresByType application/json A31536000
    ExpiresByType application/vnd.ms-access A31536000
    ExpiresByType audio/midi A31536000
    ExpiresByType video/quicktime A31536000
    ExpiresByType audio/mpeg A31536000
    ExpiresByType video/mp4 A31536000
    ExpiresByType video/mpeg A31536000
    ExpiresByType application/vnd.ms-project A31536000
    ExpiresByType application/x-font-otf A31536000
    ExpiresByType application/vnd.ms-opentype A31536000
    ExpiresByType application/vnd.oasis.opendocument.database A31536000
    ExpiresByType application/vnd.oasis.opendocument.chart A31536000
    ExpiresByType application/vnd.oasis.opendocument.formula A31536000
    ExpiresByType application/vnd.oasis.opendocument.graphics A31536000
    ExpiresByType application/vnd.oasis.opendocument.presentation A31536000
    ExpiresByType application/vnd.oasis.opendocument.spreadsheet A31536000
    ExpiresByType application/vnd.oasis.opendocument.text A31536000
    ExpiresByType audio/ogg A31536000
    ExpiresByType application/pdf A31536000
    ExpiresByType image/png A31536000
    ExpiresByType application/vnd.ms-powerpoint A31536000
    ExpiresByType audio/x-realaudio A31536000
    ExpiresByType image/svg+xml A31536000
    ExpiresByType application/x-shockwave-flash A31536000
    ExpiresByType application/x-tar A31536000
    ExpiresByType image/tiff A31536000
    ExpiresByType application/x-font-ttf A31536000
    ExpiresByType application/vnd.ms-opentype A31536000
    ExpiresByType audio/wav A31536000
    ExpiresByType audio/wma A31536000
    ExpiresByType application/vnd.ms-write A31536000
    ExpiresByType application/font-woff A31536000
    ExpiresByType application/vnd.ms-excel A31536000
    ExpiresByType application/zip A31536000
</IfModule>
<IfModule mod_deflate.c>
    <IfModule mod_headers.c>
        Header append Vary User-Agent env=!dont-vary
    </IfModule>
        AddOutputFilterByType dEFLATE text/css text/x-component application/x-javascript application/javascript text/javascript text/x-js text/html text/richtext image/svg+xml text/plain text/xsd text/xsl text/xml image/x-icon application/json
    <IfModule mod_mime.c>
        # dEFLATE by extension
        AddOutputFilter dEFLATE js css htm html xml
    </IfModule>

<FilesMatch "\.(asf|asx|wax|wmv|wmx|avi|bmp|class|divx|doc|docx|eot|exe|gif|gz|gzip|ico|jpg|jpeg|jpe|json|mdb|mid|midi|mov|qt|mp3|m4a|mp4|m4v|mpeg|mpg|mpe|mpp|otf|odb|odc|odf|odg|odp|ods|odt|ogg|pdf|png|pot|pps|ppt|pptx|ra|ram|svg|svgz|swf|tar|tif|tiff|ttf|ttc|wav|wma|wri|woff|xla|xls|xlsx|xlt|xlw|zip|ASF|ASX|WAX|WMV|WMX|AVI|BMP|CLASS|dIVX|dOC|dOCX|EOT|EXE|GIF|GZ|GZIP|ICO|JPG|JPEG|JPE|JSON|MdB|MId|MIdI|MOV|QT|MP3|M4A|MP4|M4V|MPEG|MPG|MPE|MPP|OTF|OdB|OdC|OdF|OdG|OdP|OdS|OdT|OGG|PdF|PNG|POT|PPS|PPT|PPTX|RA|RAM|SVG|SVGZ|SWF|TAR|TIF|TIFF|TTF|TTC|WAV|WMA|WRI|WOFF|XLA|XLS|XLSX|XLT|XLW|ZIP)$">
    FileETag MTime Size
  
</FilesMatch>






# compress text, html, javascript, css, xml:
AddOutputFilterByType dEFLATE text/plain
AddOutputFilterByType dEFLATE text/html
AddOutputFilterByType dEFLATE text/xml
AddOutputFilterByType dEFLATE text/css
AddOutputFilterByType dEFLATE application/xml
AddOutputFilterByType dEFLATE application/xhtml+xml
AddOutputFilterByType dEFLATE application/rss+xml
AddOutputFilterByType dEFLATE application/javascript
AddOutputFilterByType dEFLATE application/x-javascript


<IfModule mod_expires.c>
    ExpiresActive on
    ExpiresByType text/css "access plus 60 days"
    ExpiresByType text/javascript "access plus 60 days"
    ExpiresByType image/ico "access plus 60 days"
    ExpiresByType image/jpg "access plus 60 days"
    ExpiresByType image/jpeg "access plus 60 days"
    ExpiresByType image/gif "access plus 60 days"
    ExpiresByType image/png "access plus 60 days"
    ExpiresByType text/css "access plus 60 days"
    ExpiresByType text/html "access plus 60 days"
</IfModule>

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 05:39:41 PM

Quote from: viralalert on July 24, 2016, 12:41:39 PM

I recommend to check your phpmyadmin to see those are abusing the site. When I checked my database, I've seen a user that has over 50 email addresses that is why he was able to claim in my faucet every minute. Here are the email addresses. I think adding some setting to block email address in the admin panel would be great.

la.tu.gio@gmail.com
la.tu.gi.o@gmail.com

*snip*

i have checked my database i dont have these entrys i have 2 or 3 cheaters with double or tripple email accounts .. but not like you have

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 05:42:30 PM

for proxies you can add this

Code:

# Block Proxy

RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARdEd_FOR} !^$ [OR]
RewriteCond %{HTTP:HTTP_X_BRAZIL_FORWARdEd_FOR} !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARdEd_FOR}        !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_CONNECTION}     !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_CONNECTION}    !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XROXY_CONNECTION}     !^$ [OR]
RewriteCond %{HTTP:X_HTTP_PROXY_Id}             !^$ [OR]
RewriteCond %{HTTP:X_HTTP_XPROXY_Id}            !^$ [OR]
RewriteCond %{HTTP:FORWARdEd_HTTP_FOR_IP}       !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARdEd_FOR_IP}       !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_AddR}         !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARdEd_FOR}        !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_CONNECTION}     !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_CONNECTION}    !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_CONNECTION}     !^$ [OR]
RewriteCond %{HTTP:HTTP_X_PROXY_Id}             !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XPROXY_Id}            !^$ [OR]
RewriteCond %{HTTP:HTTP_X_XROXY_Id}             !^$ [OR]
RewriteCond %{HTTP:X_FORWARdEd_FOR}             !^$ [OR]
RewriteCond %{HTTP:X_HTTP_FORWARdEd}            !^$ [OR]
RewriteCond %{HTTP:X_PROXY_CONNECTION}          !^$ [OR]
RewriteCond %{HTTP:X_PROXY_Id}                  !^$ [OR]
RewriteCond %{HTTP:X_USERAGENT_VIA}             !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_CONNECTION}         !^$ [OR]
RewriteCond %{HTTP:X_XPROXY_Id}                 !^$ [OR]
RewriteCond %{HTTP:X_XROXY_CONNECTION}          !^$ [OR]
RewriteCond %{HTTP:X_XROXY_Id}                  !^$ [OR]
RewriteCond %{HTTP:CLIENT_HTTP_IP}              !^$ [OR]
RewriteCond %{HTTP:FORWARdEd_FOR_IP}            !^$ [OR]
RewriteCond %{HTTP:FORWARdEd_HTTP_FOR}          !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP}              !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARdEd_FOR}          !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_CONNECTION}       !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY_Id}               !^$ [OR]
RewriteCond %{HTTP:HTTP_USERAGENT_VIA}          !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_CONNECTION}      !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY_Id}              !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_CONNECTION}       !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY_Id}               !^$ [OR]
RewriteCond %{HTTP:HTTP_X_FORWARdEd}            !^$ [OR]
RewriteCond %{HTTP:PC_REMOTE_AddR}              !^$ [OR]
RewriteCond %{HTTP:PROXY_HTTP_CONNECTION}       !^$ [OR]
RewriteCond %{HTTP:USERAGENT_HTTP_VIA}          !^$ [OR]
RewriteCond %{HTTP:XPROXY_HTTP_CONNECTION}      !^$ [OR]
RewriteCond %{HTTP:XROXY_HTTP_CONNECTION}       !^$ [OR]
RewriteCond %{HTTP:X_FORWARdEd}                 !^$ [OR]
RewriteCond %{HTTP:X_PROXY}                     !^$ [OR]
RewriteCond %{HTTP:X_XPROXY}                    !^$ [OR]
RewriteCond %{HTTP:X_XROXY}                     !^$ [OR]
RewriteCond %{HTTP:CLIENT_IP}                   !^$ [OR]
RewriteCond %{HTTP:FORWARdEd_FOR}               !^$ [OR]
RewriteCond %{HTTP:HTTP_FORWARdEd}              !^$ [OR]
RewriteCond %{HTTP:HTTP_PROXY}                  !^$ [OR]
RewriteCond %{HTTP:HTTP_VIA}                    !^$ [OR]
RewriteCond %{HTTP:HTTP_XPROXY}                 !^$ [OR]
RewriteCond %{HTTP:HTTP_XROXY}                  !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION}            !^$ [OR]
RewriteCond %{HTTP:PROXY_Id}                    !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA}               !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION}           !^$ [OR]
RewriteCond %{HTTP:XPROXY_Id}                   !^$ [OR]
RewriteCond %{HTTP:XROXY_CONNECTION}            !^$ [OR]
RewriteCond %{HTTP:XROXY_Id}                    !^$ [OR]
RewriteCond %{HTTP:FORWARdEd}                   !^$ [OR]
RewriteCond %{HTTP:PROXY}                       !^$ [OR]
RewriteCond %{HTTP:USERAGENT}                   !^$ [OR]
RewriteCond %{HTTP:VIA}                         !^$ [OR]
RewriteCond %{HTTP:XPROXY}                      !^$ [OR]
RewriteCond %{HTTP:XROXY}                       !^$ [OR]
RewriteRule ^(.*)$ – [F]

but i dont use this because i use a proxie for my internet service

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 05:53:35 PM

Quote from: Gifted on July 24, 2016, 05:33:05 PM

I believe they are using tor to get around the timer.. this blocks all tor nodes.

Create a file named .htaccess if you haven't already and add this code

Code:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

What does this option do please ? .. i have asked google because i don't known this .. but can't find a good answer

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 06:18:47 PM

Quote from: Gifted on July 24, 2016, 05:42:30 PM

for proxies you can add this

Code:

# Block Proxy

RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARdEd_FOR} !^$ [OR]
<snip>

but i dont use this because i use a proxie for my internet service

This kicked me instant out .. without using a proxy .. but a lot of faucets dont let me in .. because of tor/proxy/vpn using .. if i go to http://whatismyipaddress.com/proxy-check all i green (proxy not detectet) ;D
so this dectection is i dont now the right english words for it .. useless ?

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 06:24:12 PM

Quote from: 5ub_zer0 on July 24, 2016, 06:18:47 PM

Quote from: Gifted on July 24, 2016, 05:42:30 PM

for proxies you can add this

Code:

# Block Proxy

RewriteCond %{HTTP:X_HTTP_BRAZIL_FORWARdEd_FOR} !^$ [OR]
<snip>

but i dont use this because i use a proxie for my internet service

instead of using the htacces for proxies i added this to the index file because i dont claim but i go to the site

Code:

//We do not allow proxy here
if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
die("It would apprear you're using a proxy, so please, go fuck yourself!");

function checkProxy($ip){
		$contactEmail="EMAIL";
		$timeout=3; 
		$banOnProability=0.99;
		
		$ch = curl_init();
		curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
		curl_setopt($ch, CURLOPT_TIMEOUT, $timeout);
		curl_setopt($ch, CURLOPT_URL, "http://check.getipintel.net/check.php?ip=$ip");
		$response=curl_exec($ch);
		
		curl_close($ch);
		
		
		if ($response > $banOnProability) {
				return true;
		} else {
			if ($response < 0 || strcmp($response, "") == 0 ) {
				//The server returned an error, you might want to do something
				//like write to a log file or email yourself
				//This could be true due to an invalid input or you've exceeded
				//the number of allowed queries. Figure out why this is happening
				//because you aren't protected by the system anymore
				//Leaving this section blank is dangerous because you assume
				//that you're still protected, which is incorrect
				//and you might think GetIPIntel isn't accurate anymore
				//which is also incorrect.
				//failure to implement error handling is bad for the both of us
			}
				return false;
		}
}
$ip=$_SERVER['REMOTE_ADDR'];
if (checkProxy($ip)) {
	$view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Bots not allowed !! If you are not a bot and not on a proxy, i still cant help you !</p></div></div>';
    $message                     = "Proxy";
    goto error; 
}
 if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{ 
  $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Bots not allowed !! If you are not a bot and not on a proxy, i still cant help you !</p></div></div>';
    $message                     = "Proxy";
    goto error; 
  }
  $q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
  $q->execute(array($username,$ip));
  $row = $q->fetch();
  //timer check

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 06:26:34 PM

Quote from: 5ub_zer0 on July 24, 2016, 05:53:35 PM

Quote from: Gifted on July 24, 2016, 05:33:05 PM

I believe they are using tor to get around the timer.. this blocks all tor nodes.

Create a file named .htaccess if you haven't already and add this code

Code:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

What does this option do please ? .. i have asked google because i don't known this .. but can't find a good answer

This blocks all tor addresses but you cut off the addresses

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 06:39:31 PM

I am banned at http://check.getipintel.net/ to mutch requests .. i was in contact with this guy .. he told me i can make a custom tarif but .. lol .. seriously??? i give satohis away .. the advertising payment never covered this .. and than a damn **** steals satoshi and i should pay for this useless proxycheck ?

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on July 24, 2016, 06:42:20 PM

Quote from: Gifted on July 24, 2016, 06:26:34 PM

Code:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

This blocks all tor addresses but you cut off the addresses

i know deny and so on options - so i cut it off because i would only know what this option means

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 06:45:37 PM

Quote from: 5ub_zer0 on July 24, 2016, 06:42:20 PM

Quote from: Gifted on July 24, 2016, 06:26:34 PM

Code:

<Files 403.shtml>
order allow,deny
allow from all
</Files>

This blocks all tor addresses but you cut off the addresses

i know deny and so on options - so i cut it off because i would only know what this option means

well it allows all to go to page and denys from the ip you list

look here http://blamcast.net/articles/block-bots-hotlinking-ban-ip-htaccess (http://blamcast.net/articles/block-bots-hotlinking-ban-ip-htaccess)

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 06:48:15 PM

Quote from: 5ub_zer0 on July 24, 2016, 06:39:31 PM

you should try the code i left and put your faucet back up

Title: Re: XAPO Script - Hacked
Post by: viralalert on July 24, 2016, 07:23:39 PM

Gifted, all the codes you posted are already implemented on my site before you even post it. It's not your own code, you just get it somewhere else. I thought the codes you are about to share are from yours. :( . I think I wasted my time waiting for your codes as it was already implemented on my site :(.

Title: Re: XAPO Script - Hacked
Post by: Ratnet on July 24, 2016, 08:13:45 PM

Quote from: 5ub_zer0 on July 24, 2016, 06:39:31 PM

In order to not get banned from IPGetIntel you should make some kind of "cache" (store in db) of the result returned from them and not to make a request again if you already made one for an IP in the past (some amount of time).

I have 3 faucets with one email on IPGetIntel and never had any problem.

Cheers!

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 08:55:52 PM

Quote from: viralalert on July 24, 2016, 07:23:39 PM

so your saying you have all the tor nodes ip's in htaccess?? and i did make the htaccess ::) feel free to help too !!!!

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 24, 2016, 08:58:06 PM

Quote from: Ratnet on July 24, 2016, 08:13:45 PM

Quote from: 5ub_zer0 on July 24, 2016, 06:39:31 PM

so your saying cal an array of somekind???

Title: Re: XAPO Script - Hacked
Post by: zenitzz on July 25, 2016, 01:29:52 AM

Quote from: 5ub_zer0 on July 21, 2016, 06:33:11 PM

Yes now it's too bad for anyone who wants to have a faucet sites will suffer an attack of bots to make up for losses, if that attacked from bot so not a problem with a script.

Title: Re: XAPO Script - Hacked
Post by: FaucetRank.com on July 25, 2016, 01:35:27 AM

Quote from: zenitzz on July 25, 2016, 01:29:52 AM

Quote from: 5ub_zer0 on July 21, 2016, 06:33:11 PM

Yes now it's too bad for anyone who wants to have a faucet sites will suffer an attack of bots to make up for losses, if that attacked from bot so not a problem with a script.

It doesn't seem a bot attack because user is using different emails and I think he is manually doing this but little bit faster.
His all emails should be banned and than his game over.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 25, 2016, 11:04:38 AM

Quote from: FaucetRank.com on July 25, 2016, 01:35:27 AM

Quote from: zenitzz on July 25, 2016, 01:29:52 AM

Quote from: 5ub_zer0 on July 21, 2016, 06:33:11 PM

Yes now it's too bad for anyone who wants to have a faucet sites will suffer an attack of bots to make up for losses, if that attacked from bot so not a problem with a script.

It doesn't seem a bot attack because user is using different emails and I think he is manually doing this but little bit faster.
His all emails should be banned and than his game over.

i agree with you its done manual. this is why i think hes using TOR and this is why i updated the TOR IP'S in the .htaccess so far it might be working.

here my thought... with vpn or proxie you can own so many but with TOR there is over 3000 of them so Blocking TOR is the solution

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 25, 2016, 11:24:00 AM

Ok, so that didn't work ! I will be personally building a login and extra CAPTCHA for the Script and putting together a ready download. This will take a few days or a week because i have a day job that takes a lot out of me, so i will work a few hours a day with it and when i'm done i will post the improved Xapo Script.

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on July 25, 2016, 01:59:11 PM

These known Xapo faucets are also using the same script as Gifted's:

www.aliensbitcoin.eu
www.animalscoin.eu
www.freebtc.kz
www.gentlebitcoin.eu
www.goldcoinjar.com
www.ilovebtc.eu
www.jupiterbitcoin.com
www.onoxvo.es
www.pandabitcoin.eu
www.storesxbox.es
www.sunbitcoin.com
www.whalebitcoin.in
www.xapobtc.com

Althought they used the same script, most of them modified the script. I wonder if they also experienced the same attack?

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 25, 2016, 04:42:40 PM

Quote from: alfaboy23 on July 25, 2016, 01:59:11 PM

ok, so i figured out that the timer only applies to the ip not the email or btc address... this is the mistake "its needs both"

Title: Re: XAPO Script - Hacked
Post by: dibon on July 26, 2016, 07:54:14 AM

Hey guys,
Im using different script which checks IPs & emails also, but....
Im getting drained by people with multi accounts (that is sure) and some bots may be too.

They found a method for creating multiple accounts. This is how it works:

1. create temporary email
2. go to textnow.com and create virtual phone number (for free!)
3. create another xapo account veryfing it using these fake emails and phones
4. join all your accounts so they can be operated from one xapo account
5. use proxies, vpns

As I can see in my phpmyadmin there is a lot of people that have 5-8 accounts. Even with the same login just in different provider (mostly from RU and UA).
But there is also A LOT (!!!!) of accounts like tyejsalinjet1988@yandex.ru, webcokoku1985@yandex.ru etc.. Random letters and year...

So what can we do?!?!

At this moment I turned on another captcha verification for those countries in Cloud Flare. But it did not stopped some of them..

Title: Re: XAPO Script - Hacked
Post by: dibon on July 26, 2016, 09:15:34 AM

Sorry guys from yandex.ru, you will not be able to payout from my faucet.
Also there is a huge problem with determining proxy when you are behind cloudflare, so I decided to turn it off and check for proxies..
We will see if that helps.

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on July 26, 2016, 12:45:27 PM

Quote from: dibon on July 26, 2016, 09:15:34 AM

After the last attack on my faucet, aside from Ind0n3s!a, I also block most IP's that is using yandex.ru, and most of them are in Ru5s!a, but some of them are using non-Ru5s!an IP.

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 26, 2016, 03:58:15 PM

So even if i built a login and timed by emails and ips it still would have no effect... The best thing i can think of is blocking the whole country

Block Russia like this in .htaccess https://www.countryipblocks.net/deny_russia.txt

Title: Re: XAPO Script - Hacked
Post by: Gifted on July 28, 2016, 02:24:38 PM

Blocking whole countries do not work either... i see one email collecting every couple of min.. this is due to not having a timer on the email but if they are making false email accounts whats the point....i am at a dead stop with this problem..

Title: Re: XAPO Script - Hacked
Post by: Salmen on July 28, 2016, 02:33:21 PM

Quote from: Gifted on July 28, 2016, 02:24:38 PM

From which email provider comes the most bots attack?

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 02, 2016, 04:24:23 AM

Quote from: Gifted on July 28, 2016, 02:24:38 PM

@Gifted I am new here but been reading this post for about two hours now. And been wondering how to effectively STOP BOTS from doing so much damage. I know everyone here has way more experience than myself.

I am ( In my little squirrel brain ) ( And yes not much room for thinking either ) mind ( hint smoke coming out of ears ) two things that come to mind are Log-in and Time on Site after Log-in.

Example #1
1) ABC user comes to site.
2) ABC user has to enter bitcoin wallet address or for Xapo a email address.
3) ABC user has to Solve Captcha.
4) ABC user is credited with xxx amount of satoshi.

***BOTS use a Captcha Service to Solve the Captcha's***

If the previous BOT or Hacker is running consecutive transactions is he/she or it having to Solve Captcha's before the transaction or has this BOT or person found a weakness in the script where they can call the same Captcha over and over. Not exactly sure how they would be able to freeze that Captcha but in theory it is possible and can explain how they are able to process so many transactions in a short period of time.

I would like to ask if you are able to incorporate two ideas into the script and close all back doors for Captcha problems.

1) I know it is more of a bother than anything for any site to use a Password. But if we want the script to be secure we need to incorporate counter measures to STOP them. I would propose to add a Random Password from Random ORG with a Timer on it to input the Password or PassCode ( In theory it takes 20 seconds to see the code or password and enter it ) maybe longer if you are blind like me. By limiting the time on the Password or PassCode it stops the BOT from having time get it solved from a outsourcing place. This is for being able to STOP the BOT from entering. As the Password or PassCode is a one time thing and can not be duplicated for other users to benefit from.

2) If that is too much trouble then I would suggest as a last resort to have the user verify the Xapo email by sending them a Password or PassCode to enable automatic withdrawals. Which means the BOT or person would be hindered and frustrated so they would quit trying to hack it. As it keeps Honest Users Honest and DisHonest Users Away.

3) Use both methods and change the time limit on the Captcha Solving to under 20 seconds and Password or PassCode times to less than 20 seconds to respond. Adjust the time accordingly if needed.

BOT ;D = Password or PassCode ??? = BOT >:( = Owner ::) = Owner Reply :P

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 02, 2016, 08:43:18 PM

Quote from: ardodd on August 02, 2016, 04:24:23 AM

Quote from: Gifted on July 28, 2016, 02:24:38 PM

Its not as easy as you put it. the problem is they can become a new client at anytime hence getting ip's. emails are suppose to be stopped by
Xapo itself and changing ip addreses seems no big deal for these guys. there is no security flaw in the capcha its in xapo wallet itself. i have written the security team on this issue and hopefully this will be fixed. im pretty sure the are doing it manual not by a bot because someone with programming knowlegde usaly wont waste their time with faucets when they are making six figure income. some bots do work but i think they were just someones hobby. but no bot can change ip's put new address in and solve captcha and turn to next website it would just seem very unlikely

what your saying is just another captcha but custom. that works for bots but i think we are dealing with manual inputs "maybe paying for captcha services with a pool share"

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 02, 2016, 09:00:39 PM

Quote from: Salmen on July 28, 2016, 02:33:21 PM

Quote from: Gifted on July 28, 2016, 02:24:38 PM

From which email provider comes the most bots attack?

Russian

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 03, 2016, 09:36:05 AM

Gifted,

As I said before I did not much experience in this but just wanted to give it a try. Thats no problem I have been called worse by better. And yes I am a idiot, I dont claim to be a genius by any means. Put a ROCK beside me and the ROCK would look like a ROCKET Scientist.

But to enhance this thread I went out looking for ways to get Bitcoins Fast and come back with this little contraption. It is called CoinCollector and I got it for $1.00 online. Now I did have to do some digging into it before I learned how it operated ( 30 Minutes to be exact ). And it was up and running gathering Bitcoins for me.

And this may not even be what you are talking about nor the whole conversation. But it is how I interpreted it.

#1 CoinCollector v4
http://www.imagehostingforall.com/images/ardodd/coincollectorv4.jpg

#2 CoinCollector v4 Settings
http://www.imagehostingforall.com/images/ardodd/coincollectorv4settings.jpg

#3 CoinCollector v4 ProxyList
http://www.imagehostingforall.com/images/ardodd/coincollectorv4proxylist.jpg

#4 CoinCollector v4 Captcha Reading Services
http://www.imagehostingforall.com/images/ardodd/coincollectorv4captchaservices.jpg

I am sure any idiot could figure this out...I just need a little longer than your normal idoit...

Title: Re: XAPO Script - Hacked
Post by: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 03, 2016, 06:05:11 PM

Quote from: ardodd on August 03, 2016, 09:36:05 AM

yes i have seen those.. in fact they have my faucet list posted next to the download as you can see here http://thebot.net/threads/coincollector-v4-multi-faucet-bot.316973/page-36#post-3488787 (http://thebot.net/threads/coincollector-v4-multi-faucet-bot.316973/page-36#post-3488787)

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

Title: Re: XAPO Script - Hacked
Post by: crairezx20 on August 03, 2016, 06:15:19 PM

I heard in bitcoinblackhat i forgot the name of the forum that they have a script for timer resetter that can claim every minute.
so i think according to the claim in the first page in this thread i saw that every 2 seconds claim.
So i think he is using a complete bot. coin collector v4 dont work just like the same that every 2 seconds claim. because coin collector has only selected faucet..

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 03, 2016, 06:20:50 PM

timer reset:

Open the source "inspect element" through the dev tools and remove the disabled attribute from the button/input tag. Simple
On Chrome, use ctrl-shift-I to bring up the dev panel. This can even be automated with a plugin such as tampermonkey. Write a script that modifies the site's DOM to remove those annoyances and have tampermonkey run it everytime you visit that faucet.

stop this by encrypting source code fix is here http://www.ioncube.com/html_encoder.php (http://www.ioncube.com/html_encoder.php)

new fix listed below

Title: Re: XAPO Script - Hacked
Post by: Lionidas on August 03, 2016, 06:49:56 PM

Another hack job? :o
Is anything to do with bitcoin not safe to use anymore? These things seem to be affecting it more and more these days that I am starting to worry if my coins will be available whenever I go and check to see if they are still there.
Xapo wallets can be affected if this script takes their wallet address associated to what they used for this faucet.

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 03, 2016, 10:03:06 PM

WOW !!!!!

Guess I am glad I come here to read up on some the problems before I started the project I have been wanting to do.

Gifted your script was and still is what I been looking for. But i wanted to add a Bitcoin Cycler on the side to double the bitcoins for users. But knowing that information here does make me very hesitant to start on it. And since I do not have any experience with manipulating code I might would need to seek professional help on this matter.

If you get the bugs fixed I definitely am interested in using the script and having the bitcoin cycler script running together.

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 01:36:09 AM

Code to stop timer reset has been implemented and disables right click for source and F12

Put in public_html/style/template/index.php right before </head>

Disable right click:

Code:

<script language="JavaScript">

var message="Function Disabled Due to Bots trying to Claim !";

///////////////////////////////////
function clickIE4(){
if (event.button==2){
alert(message);
return false;
}
}

function clickNS4(e){
if (document.layers||document.getElementById&&!document.all){
if (e.which==2||e.which==3){
alert(message);
return false;
}
}
}

if (document.layers){
document.captureEvents(Event.MOUSEDOWN);
document.onmousedown=clickNS4;
}
else if (document.all&&!document.getElementById){
document.onmousedown=clickIE4;
}

document.oncontextmenu=new Function("alert(message);return false")
</script>
// --> 
</script>

Disable ctr-shift-i "Just CTR"

Code:

 coming soon

Disable F12 for chrome but update for all browsers coming soon

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////
</script>

2 Anti Adblock code put in same spot under the code above

Code:

<noscript>&lt;center id=b6b2&gt;&lt;p&gt;Please enable JavaScript!&lt;br&gt;Bitte aktiviere JavaScript!&lt;br&gt;S'il vous pla&amp;icirc;t activer JavaScript!&lt;br&gt;Por favor,activa el JavaScript!&lt;br&gt;&lt;a href="http://antiblock.org/"&gt;antiblock.org&lt;/a&gt;&lt;/p&gt;&lt;/div&gt;</noscript>

Code:

<script>(function(w,u){var d=w.document,z=typeof u;function b6b2(){function c(c,i){var e=d.createElement('b'),b=d.body,s=b.style,l=b.childNodes.length;if(typeof i!=z){e.setAttribute('id',i);s.margin=s.padding=0;s.height='100%';l=Math.floor(Math.random()*l)+1}e.innerHTML=c;b.insertBefore(e,b.childNodes[l-1])}function g(i,t){return !t?d.getElementById(i):d.getElementsByTagName(t)};function f(v){if(!g('b6b2')){c('<p>Please disable your ad blocker to claim! (AdBlock, Adlock Plus, uBlock etc.)<br>Bitte deaktiviere Deinen Werbeblocker!<br>Veuillez d&eacute;sactiver votre bloqueur de publicit&eacute;!<br>Por favor, desactive el bloqueador de anuncios!<br><br>Our faucet provides the service of giving small fractions of Bitcoin visitors.<br>This service can provide through advertising on the site. <br>Please disable ad blocker! and help to give more Bitcoin free for all!<br><a href="http://www.bitcoinfaucetexchange.com/">I disable ad blocker and want to refresh the page!</a></p>','b6b2')}};(function(){var a=['AdBar1','ad_468_60','adsbox-left','adspot-295x60','headeradvertholder','kaufDA-widget','sidebar_ad','ad','ads','adsense'],l=a.length,i,s='',e;for(i=0;i<l;i++){if(!g(a[i])){s+='<a id="'+a[i]+'"></a>'}}c(s);l=a.length;setTimeout(function(){for(i=0;i<l;i++){e=g(a[i]);if(e.offsetParent==null||(w.getComputedStyle?d.defaultView.getComputedStyle(e,null).getPropertyValue('display'):e.currentStyle.display)=='none'){return f('#'+a[i])}}},250)}());(function(){var t=g(0,'img'),a=['.org/gads/','/adhandler.','/adleaderboardtop.','/ads/300.','/adv/ads/ad','/advertising.','/advertorial_','/no_ads.','/twgetad3.','.480x60.'],i;if(typeof t[0]!=z&&typeof t[0].src!=z){i=new Image();i.onload=function(){this.onload=z;this.onerror=function(){f(this.src)};this.src=t[0].src+'#'+a.join('')};i.src=t[0].src}}());(function(){var o={'http://pagead2.googlesyndication.com/pagead/show_ads.js':'google_ad_client','http://js.adscale.de/getads.js':'adscale_slot_id','http://get.mirando.de/mirando.js':'adPlaceId'},S=g(0,'script'),l=S.length-1,n,r,i,v,s;d.write=null;for(i=l;i>=0;--i){s=S[i];if(typeof o[s.src]!=z){n=d.createElement('script');n.type='text/javascript';n.src=s.src;v=o[s.src];w[v]=u;r=S[0];n.onload=n.onreadystatechange=function(){if(typeof w[v]==z&&(!this.readyState||this.readyState==="loaded"||this.readyState==="complete")){n.onload=n.onreadystatechange=null;r.parentNode.removeChild(n);w[v]=null}};r.parentNode.insertBefore(n,r);setTimeout(function(){if(w[v]===u){f(n.src)}},2000);break}}}())}if(d.addEventListener){w.addEventListener('load',b6b2,false)}else{w.attachEvent('onload',b6b2)}})(window);</script>

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 01:48:00 AM

Ive decided to make a fresh copy with all added security to it and display download sometime tomorrow. i was waiting for answers before i made a new copy . if someone would like to contribute more security code plz feel free to post

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 02:02:32 AM

It HIDE the source code? or you just can't open the source code window?

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 02:10:45 AM

Quote from: sabotag3x on August 04, 2016, 02:02:32 AM

It HIDE the source code? or you just can't open the source code window?

~~cant right click but you can still hit f12 try on my site http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com)~~

fixed both

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 02:23:55 AM

so now there is now inspect element at all blocking right click and f12 with the codes i listed above

but now there is ctr-shift-I to stop lol

The problem is people will have a hard time pasting their btc address this i will have to think about how to get around

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 02:33:12 AM

are you testing here -> http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) ?
because I can right click, F12, CTRL+U, CTRL+SHIFT+I

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 02:34:37 AM

Quote from: sabotag3x on August 04, 2016, 02:33:12 AM

are you testing here -> http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) ?
because I can right click, F12, CTRL+U, CTRL+SHIFT+I

refresh the page

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 02:42:26 AM

Quote from: Gifted on August 04, 2016, 02:34:37 AM

Quote from: sabotag3x on August 04, 2016, 02:33:12 AM

are you testing here -> http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) ?
because I can right click, F12, CTRL+U, CTRL+SHIFT+I

refresh the page

Now I can't right click.. however F12 and others keys still working..

what about make a full javascript or flash faucet? :D
I really don't know what more we can do against bots..

edit: I'm using Maxthon browser

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 02:46:24 AM

to many browsers use diffrent code so this will take a little while

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source goes in <head>

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

Put this in the body:

Code:

<body onkeypress="return disableCtrlKeyCombination(event);" onkeydown="return disableCtrlKeyCombination(event);" >

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

Title: Re: XAPO Script - Hacked
Post by: viralalert on August 04, 2016, 04:05:34 AM

Quote from: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

Great! It's working. Good job!

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 04, 2016, 04:05:51 AM

Tested with Chrome - F12 - Strg+U - Strg+Shift+I doesnt work anymore

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 04, 2016, 04:26:25 AM

Quote from: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

Just FYI - i have insert this code into my page for testing purpose ... but STRG+U are still works there - yeah i did a refresh and all this necessary :-) .. you can see on https://faucet.today (https://faucet.today) if you press Strg+U that the code is implemented

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 05:05:29 AM

Good job Gifted, right click and CTRL commands don't work! good job!
I was thinking about CTRL+V on address but this function works fine..

now try to deal with it.. ;D
https://talkimg.com/images/2023/07/24/QUqt8.png

Always will have a way.. maybe you wanna try php obfuscator like this http://phpobfuscator.net/examples.html (http://phpobfuscator.net/examples.html)

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 05:45:32 AM

Quote from: 5ub_zer0 on August 04, 2016, 04:26:25 AM

Quote from: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

What browser are you using in Germany?

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 05:47:14 AM

Quote from: sabotag3x on August 04, 2016, 05:05:29 AM

Good job Gifted, right click and CTRL commands don't work! good job!
I was thinking about CTRL+V on address but this function works fine..

now try to deal with it.. ;D
https://i.imgur.com/fG0UCIU.png

Always will have a way.. maybe you wanna try php obfuscator like this http://phpobfuscator.net/examples.html (http://phpobfuscator.net/examples.html)

lol, i didnt even know that was there
ill get back to you on that. Thanks for showing me this

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 06:01:17 AM

Quote from: 5ub_zer0 on August 04, 2016, 04:26:25 AM

Quote from: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

sorry put this in the body!

Code:

<body onkeypress="return disableCtrlKeyCombination(event);" onkeydown="return disableCtrlKeyCombination(event);" >

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 04, 2016, 06:13:48 AM

Quote from: Gifted on August 04, 2016, 06:01:17 AM

Quote from: 5ub_zer0 on August 04, 2016, 04:26:25 AM

Quote from: Gifted on August 04, 2016, 03:15:04 AM

ok, i think i got it now but not sure if its for all browsers

Code to stop timer exploit or source

Code:

<script language="JavaScript">

//////////F12 disable code////////////////////////
    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled"; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'v', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#38;#38;#8216;Keyboard shortcuts are cool!&#38;#38;#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>

You can test here http://www.bitcoinfaucetexchange.com (http://www.bitcoinfaucetexchange.com) and let me know if it works with what browsers

sorry put this in the body!

Code:

<body onkeypress="return disableCtrlKeyCombination(event);" onkeydown="return disableCtrlKeyCombination(event);" >

Thats it - now it works .. thankx a lot .. (i use Chrome) ..

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 06:18:26 AM

@ 5ub_zer0 : Your welcome, im trying guys just give me some more time and i will have a new download. 8)

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 06:22:34 AM

make sure you allow ctr+v so they can paste the address (i have modified it here below) list of commands to disable http://anti-code.com/devtools-cheatsheet/ (http://anti-code.com/devtools-cheatsheet/)

Here is the modified code :

Code:

/////////make sure java script is on//////

<noscript>&lt;center id=b6b2&gt;&lt;p&gt;Please enable JavaScript!&lt;br&gt;Bitte aktiviere JavaScript!&lt;br&gt;S'il vous pla&amp;icirc;t activer JavaScript!&lt;br&gt;Por favor,activa el JavaScript!&lt;br&gt;&lt;a href="http://antiblock.org/"&gt;antiblock.org&lt;/a&gt;&lt;/p&gt;&lt;/div&gt;</noscript>


//////////F12 disable code////////////////////////
<script language="JavaScript">

    document.onkeypress = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
           //alert('No F-12');
            return false;
        }
    }
    document.onmousedown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
document.onkeydown = function (event) {
        event = (event || window.event);
        if (event.keyCode == 123) {
            //alert('No F-keys');
            return false;
        }
    }
/////////////////////end///////////////////////


//Disable right click script 

var message="Sorry, right-click has been disabled. Use CTR V to paste into address box."; 
/////////////////////////////////// 
function clickIE() {if (document.all) {(message);return false;}} 
function clickNS(e) {if 
(document.layers||(document.getElementById&&!document.all)) { 
if (e.which==2||e.which==3) {(message);return false;}}} 
if (document.layers) 
{document.captureEvents(Event.MOUSEDOWN);document.onmousedown=clickNS;} 
else{document.onmouseup=clickNS;document.oncontextmenu=clickIE;} 
document.oncontextmenu=new Function("return false") 
// 
function disableCtrlKeyCombination(e)
{
//list all CTRL + key combinations you want to disable
var forbiddenKeys = new Array('u', 'i', 'c', 'x', 'k', 'j' , 'w');
var key;
var isCtrl;
if(window.event)
{
key = window.event.keyCode;     //IE
if(window.event.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
else
{
key = e.which;     //firefox
if(e.ctrlKey)
isCtrl = true;
else
isCtrl = false;
}
//if ctrl is pressed check if other key is in forbidenKeys array
if(isCtrl)
{
for(i=0; i<forbiddenKeys.length; i++)
{
//case-insensitive comparation
if(forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
{
alert('Key combination CTRL + '+String.fromCharCode(key) +' has been disabled.');
return false;
}
}
}
return true;
}

</script>
<script type='text/javascript'>
var isCtrl = false;
document.onkeyup=function(e)
{
if(e.which == 17)
isCtrl=false;
}
document.onkeydown=function(e)
{
if(e.which == 17)
isCtrl=true;
if((e.which == 85) || (e.which == 67) &amp;&amp; isCtrl == true)
{
// alert(&#8216;Keyboard shortcuts are cool!&#8217;);
return false;
}
}
var isNS = (navigator.appName == "Netscape") ? 1 : 0;
if(navigator.appName == "Netscape") document.captureEvents(Event.MOUSEDOWN||Event.MOUSEUP);
function mischandler(){
return false;
}
function mousehandler(e){
var myevent = (isNS) ? e : event;
var eventbutton = (isNS) ? myevent.which : myevent.button;
if((eventbutton==2)||(eventbutton==3)) return false;
}
document.oncontextmenu = mischandler;
document.onmousedown = mousehandler;
document.onmouseup = mousehandler;
</script>
<script language="JavaScript">
        function disableCtrlKeyCombination(e)
        {
                //list all CTRL + key combinations you want to disable
                var forbiddenKeys = new Array("i", "u", "c", "j");
                var key;
                var isCtrl;

                if(window.event)
                {
                        key = window.event.keyCode;     //IE
                        if(window.event.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }
                else
                {
                        key = e.which;     //firefox
                        if(e.ctrlKey)
                                isCtrl = true;
                        else
                                isCtrl = false;
                }

                //if ctrl is pressed check if other key is in forbidenKeys array
                if(isCtrl)
                {
                    for (i = 0; i < forbiddenKeys.length; i++)
                        {
                                //case-insensitive comparation
                            if (forbiddenKeys[i].toLowerCase() == String.fromCharCode(key).toLowerCase())
                                {
//                                    alert("Key combination CTRL + "
//                                                + String.fromCharCode(key)
//                                                + " has been disabled.");                                    
                                        return false;
                                }
                        }
                }
                return true;
        }
    </script>
// --> 
<noscript>&lt;center id=b6b2&gt;&lt;p&gt;Please enable JavaScript!&lt;br&gt;Bitte aktiviere JavaScript!&lt;br&gt;S'il vous pla&amp;icirc;t activer JavaScript!&lt;br&gt;Por favor,activa el JavaScript!&lt;br&gt;&lt;a href="http://antiblock.org/"&gt;antiblock.org&lt;/a&gt;&lt;/p&gt;&lt;/div&gt;</noscript>
</script>
<script>(function(w,u){var d=w.document,z=typeof u;function b6b2(){function c(c,i){var e=d.createElement('b'),b=d.body,s=b.style,l=b.childNodes.length;if(typeof i!=z){e.setAttribute('id',i);s.margin=s.padding=0;s.height='100%';l=Math.floor(Math.random()*l)+1}e.innerHTML=c;b.insertBefore(e,b.childNodes[l-1])}function g(i,t){return !t?d.getElementById(i):d.getElementsByTagName(t)};function f(v){if(!g('b6b2')){c('<p>Please disable your ad blocker to claim! (AdBlock, Adlock Plus, uBlock etc.)<br>Bitte deaktiviere Deinen Werbeblocker!<br>Veuillez d&eacute;sactiver votre bloqueur de publicit&eacute;!<br>Por favor, desactive el bloqueador de anuncios!<br><br>Our faucet provides the service of giving small fractions of Bitcoin visitors.<br>This service can provide through advertising on the site. <br>Please disable ad blocker! and help to give more Bitcoin free for all!<br><a href="http://www.taurusfaucet.com/">I disable ad blocker and want to refresh the page!</a></p>','b6b2')}};(function(){var a=['AdBar1','ad_468_60','adsbox-left','adspot-295x60','headeradvertholder','kaufDA-widget','sidebar_ad','ad','ads','adsense'],l=a.length,i,s='',e;for(i=0;i<l;i++){if(!g(a[i])){s+='<a id="'+a[i]+'"></a>'}}c(s);l=a.length;setTimeout(function(){for(i=0;i<l;i++){e=g(a[i]);if(e.offsetParent==null||(w.getComputedStyle?d.defaultView.getComputedStyle(e,null).getPropertyValue('display'):e.currentStyle.display)=='none'){return f('#'+a[i])}}},250)}());(function(){var t=g(0,'img'),a=['.org/gads/','/adhandler.','/adleaderboardtop.','/ads/300.','/adv/ads/ad','/advertising.','/advertorial_','/no_ads.','/twgetad3.','.480x60.'],i;if(typeof t[0]!=z&&typeof t[0].src!=z){i=new Image();i.onload=function(){this.onload=z;this.onerror=function(){f(this.src)};this.src=t[0].src+'#'+a.join('')};i.src=t[0].src}}());(function(){var o={'http://pagead2.googlesyndication.com/pagead/show_ads.js':'google_ad_client','http://js.adscale.de/getads.js':'adscale_slot_id','http://get.mirando.de/mirando.js':'adPlaceId'},S=g(0,'script'),l=S.length-1,n,r,i,v,s;d.write=null;for(i=l;i>=0;--i){s=S[i];if(typeof o[s.src]!=z){n=d.createElement('script');n.type='text/javascript';n.src=s.src;v=o[s.src];w[v]=u;r=S[0];n.onload=n.onreadystatechange=function(){if(typeof w[v]==z&&(!this.readyState||this.readyState==="loaded"||this.readyState==="complete")){n.onload=n.onreadystatechange=null;r.parentNode.removeChild(n);w[v]=null}};r.parentNode.insertBefore(n,r);setTimeout(function(){if(w[v]===u){f(n.src)}},2000);break}}}())}if(d.addEventListener){w.addEventListener('load',b6b2,false)}else{w.attachEvent('onload',b6b2)}})(window);</script>

</head>
<body onkeypress="return disableCtrlKeyCombination(event);" onkeydown="return disableCtrlKeyCombination(event);" >

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 07:01:36 AM

LOL, so this extension in chrome kills my code https://chrome.google.com/webstore/detail/enable-right-click/hhojmcideegachlhfgfdhailpfhgknjm/related (https://chrome.google.com/webstore/detail/enable-right-click/hhojmcideegachlhfgfdhailpfhgknjm/related)

So i need a different approach :-\ :-\ :-\ :-\ :-\

Title: Re: XAPO Script - Hacked
Post by: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 07:44:44 AM

Quote from: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

Sure take a look https://github.com/destinybogan/Faucet-Builder/archive/master.zip (https://github.com/destinybogan/Faucet-Builder/archive/master.zip)

I think it needs some kind of better admin for banning ip's and seeing whos been claiming, also better security for multi claiming with proxies vpn etc. maybe a timer for button to get better bounce rate

Feel free to give it a shot ;)

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 08:46:29 AM

Quote from: Gifted on August 04, 2016, 07:44:44 AM

Quote from: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

@Gifted,

I know I don't contribute much to this topic other than stirring things up.

I was looking at some backend app's that can actually steal the information and download it into CSV files and they can program their Bot to work. I am wondering if you have looked into ( iMacros ) for Chrome and Firefox as I just got them to see if they can in anyway effect your Script. Not sure how to use them but adding them and the Free Proxy List from Chrome it may be possible for them to find backdoors.

Again I am new to this and am trying to fully understand the script so i can use it.

iMacros for Chrome #1:
http://www.imagehostingforall.com/images/ardodd/imacrosforchrome.jpg

Free Proxy List for Chrome:
http://www.imagehostingforall.com/images/ardodd/proxylistonchrome.jpg

iMacros for Firefox #1:
http://www.imagehostingforall.com/images/ardodd/imacrosforfirefox.jpg

iMacros for Firefox #2:
http://www.imagehostingforall.com/images/ardodd/imacrosforfirefox2.jpg

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 09:18:28 AM

Quote from: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

says im on a proxie and im not

Title: Re: XAPO Script - Hacked
Post by: viralalert on August 04, 2016, 09:19:36 AM

Check my faucet as well and let me know what you think about. http://viral-alert.com/xapo

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 04, 2016, 09:21:11 AM

Quote from: Gifted on August 04, 2016, 09:18:28 AM

Quote from: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

says im on a proxie and im not

Yeap, other user tell me the same thing, I'm trying to fix it..
With this code I'm blocking everyone ??? ??? ???

Code:

<?PHP
 
IF(ISSET($_SERVER['HTTP_X_FORWARDED_FOR']) || ($_SERVER['HTTP_USER_AGENT']=='') || ($_SERVER['HTTP_VIA']!='')){
        DIE("Proxy servers not allowed.");
}
 
$proxy_headers = ARRAY(   
     'HTTP_VIA',   
     'HTTP_X_FORWARDED_FOR',   
     'HTTP_FORWARDED_FOR',   
     'HTTP_X_FORWARDED',   
     'HTTP_FORWARDED',   
     'HTTP_CLIENT_IP',   
     'HTTP_FORWARDED_FOR_IP',   
     'VIA',   
     'X_FORWARDED_FOR',   
     'FORWARDED_FOR',   
     'X_FORWARDED',   
     'FORWARDED',   
     'CLIENT_IP',   
     'FORWARDED_FOR_IP',   
     'HTTP_PROXY_CONNECTION'   
        );
FOREACH($proxy_headers AS $x){
     IF (ISSET($_SERVER[$x])) DIE("You are using a proxy.");
        EXIT;
}
 
?>

and with other script, any proxy can enter on the faucet.. ??? ??? well.. I go to sleep and try again tomorrow

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 09:23:25 AM

Quote from: ardodd on August 04, 2016, 08:46:29 AM

Quote from: Gifted on August 04, 2016, 07:44:44 AM

Quote from: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

@Gifted,
I know I don't contribute much to this topic other than stirring things up.

I was looking at some backend app's that can actually steal the information and download it into CSV files and they can program their Bot to work. I am wondering if you have looked into ( iMacros ) for Chrome and Firefox as I just got them to see if they can in anyway effect your Script. Not sure how to use them but adding them and the Free Proxy List from Chrome it may be possible for them to find backdoors.

Again I am new to this and am trying to fully understand the script so i can use it.

iMacros for Chrome #1:
http://www.imagehostingforall.com/images/ardodd/imacrosforchrome.jpg

Free Proxy List for Chrome:
http://www.imagehostingforall.com/images/ardodd/proxylistonchrome.jpg

iMacros for Firefox #1:
http://www.imagehostingforall.com/images/ardodd/imacrosforfirefox.jpg

iMacros for Firefox #2:
http://www.imagehostingforall.com/images/ardodd/imacrosforfirefox2.jpg

yes, this is very possible to use you can read more about it here. its very usefull gambling but could maybe be used in faucets http://www.howtogeek.com/113789/how-to-automate-repetitive-web-browser-tasks-with-imacros/ (http://www.howtogeek.com/113789/how-to-automate-repetitive-web-browser-tasks-with-imacros/)

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 09:24:55 AM

Quote from: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

When I go there it just tells me that I am using a Proxy. And nothing else. But I am looking into the source page for it right now and this is what I am seeing on it under properties.

body
aLink:""
accessKey:""
attributes:NamedNodeMap
background:""
baseURI:"http://www.bitcoinamerica.com.br/faucet/"
bgColor:""
childElementCount:0
childNodes:NodeList[1]
children:HTMLCollection[0]
classList:DOMTokenList[0]
className:""
clientHeight:775
clientLeft:0
clientTop:0
clientWidth:1042
contentEditable:"inherit"
dataset:DOMStringMap
dir:""
draggable:false
firstChild:text
firstElementChild:null
hidden:false
id:""
innerHTML:"You are using a proxy!"
innerText:"You are using a proxy!"
isConnected:true
isContentEditable:false
lang:""
lastChild:text
lastElementChild:null
link:""
localName:"body"
namespaceURI:"http://www.w3.org/1999/xhtml"
nextElementSibling:null
nextSibling:null
nodeName:"BODY"
nodeType:1
nodeValue:null
offsetHeight:759
offsetLeft:0
offsetParent:null
offsetTop:0
offsetWidth:1026
onabort:null
onbeforecopy:null
onbeforecut:null
onbeforepaste:null
onbeforeunload:null
onblur:null
oncancel:null
oncanplay:null
oncanplaythrough:null
onchange:null
onclick:null
onclose:null
oncontextmenu:null
oncopy:null
oncuechange:null
oncut:null
ondblclick:null
ondrag:null
ondragend:null
ondragenter:null
ondragleave:null
ondragover:null
ondragstart:null
ondrop:null
ondurationchange:null
onemptied:null
onended:null
onerror:null
onfocus:null
onhashchange:null
oninput:null
oninvalid:null
onkeydown:null
onkeypress:null
onkeyup:null
onlanguagechange:null
onload:null
onloadeddata:null
onloadedmetadata:null
onloadstart:null
onmessage:null
onmousedown:null
onmouseenter:null
onmouseleave:null
onmousemove:null
onmouseout:null
onmouseover:null
onmouseup:null
onmousewheel:null
onoffline:null
ononline:null
onpagehide:null
onpageshow:null
onpaste:null
onpause:null
onplay:null
onplaying:null
onpopstate:null
onprogress:null
onratechange:null
onrejectionhandled:null
onreset:null
onresize:null
onscroll:null
onsearch:null
onseeked:null
onseeking:null
onselect:null
onselectstart:null
onshow:null
onstalled:null
onstorage:null
onsubmit:null
onsuspend:null
ontimeupdate:null
ontoggle:null
onunhandledrejection:null
onunload:null
onvolumechange:null
onwaiting:null
onwebkitfullscreenchange:null
onwebkitfullscreenerror:null
onwheel:null
outerHTML:"<body>You are using a proxy!</body>"
outerText:"You are using a proxy!"
ownerDocument:document
parentElement:html
parentNode:html
prefix:null
previousElementSibling:head
previousSibling:head
scrollHeight:775
scrollLeft:0
scrollTop:0
scrollWidth:1042
shadowRoot:null
spellcheck:true
style:CSSStyleDeclaration
tabIndex:-1
tagName:"BODY"
text:""
textContent:"You are using a proxy!"
title:""
translate:true
vLink:""
webkitdropzone:""
__proto__:HTMLBodyElement

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 09:28:47 AM

Quote from: viralalert on August 04, 2016, 09:19:36 AM

Check my faucet as well and let me know what you think about. http://viral-alert.com/xapo

@viralalert: its working for your page

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 09:32:19 AM

Thanks for bringing up the imacros thing...i just found another security problem but i dont want to share here untill its fixed

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 09:38:00 AM

Where would he allow proxy servers at now that he has disabled them completey.

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 09:48:35 AM

Quote from: Gifted on August 04, 2016, 09:32:19 AM

Thanks for bringing up the imacros thing...i just found another security problem but i dont want to share here untill its fixed

@Gifted have you considered trying out the Sandboxie Software. And asking if it can be incorporated into the script?

http://www.sandboxie.com/

I am just asking cause on one of my Wordpress sites I setup Woocommerce and conected it to Paypal Gateway. And I had to set it up using Sandboxie Software to make it Secure.

Title: Re: XAPO Script - Hacked
Post by: babo on August 04, 2016, 06:25:09 PM

Quote from: Gifted on August 04, 2016, 07:44:44 AM

Quote from: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

ok gifted, in holidays i try to improve admin panel, in specific way ip banning admin panel page

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 07:25:41 PM

Quote from: babo on August 04, 2016, 06:25:09 PM

Quote from: Gifted on August 04, 2016, 07:44:44 AM

Quote from: babo on August 04, 2016, 07:13:46 AM

Quote from: Gifted on August 03, 2016, 06:07:56 PM

Quote from: babo on August 03, 2016, 11:54:02 AM

@Gifted
thank you for your amazing script, i ear about security problem of your code.. if you want i can help to fix the problems.

what can you do?? @babo

improve your script, for work im a real frontenders fullstack.. im working with javascript but i also know php :)

ok gifted, in holidays i try to improve admin panel, in specific way ip banning admin panel page

great, would love to see what you add

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 08:08:55 PM

Ok guys, there is another hack that can be fixed by replacing this code in your index.php file not the one in style.

find this code

Code:

if($response->success){
      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and replace with this

Code:

if($response->success){
   header('Refresh: 30;url=[b]change to your faucets url[/b]');
 $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

This redirects back to your page after 30 seconds so that the captcha resets so that a imacro program cannot be programmed to just refresh and get credit every hour when they are sleeping. i would suggest do this immediately! Make sure you put your faucet address where is says change to your faucet url.

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 09:24:52 PM

Quote from: Gifted on August 04, 2016, 08:08:55 PM

Ok guys, there is another hack that can be fixed by replacing this code in your index.php file not the one in style.

find this code

Code:

if($response->success){
      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and replace with this

Code:

if($response->success){
   header('Refresh: 30;url=[b]change to your faucets url[/b]');
 $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

@Gifted would it not be better if we wait til you have made a full new version with all the changes in it. As if we keep changing the code to what comes next seems alot of extra work on you also. Call them v1.1 and use the new v1.2 so we know it is the updated version.

Example: Yesterdays security updates
v1.1

Todays security update
v1.2

And every update could have ( v ) attached to it. Would it not seem better if you made the change and then just updated the name of the change. In the description you can tell or explain what is updated.

How much you want to bet that hackers read these post and see the code change and are already looking for counter measures to it. Personally I would think posting code that fixes a security measure should not be posted and kept inside your files so no one seems it. The only way they can get the fix is by downloading the newest Version in a update.

Just my thoughts

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 09:27:52 PM

The patch is in php server side they cant have access and this needs to be fixed right away . i can see your point but a lot of people downloaded my script and they need to know now. i started a security patch thread already

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 09:36:12 PM

Quote from: Gifted on August 04, 2016, 09:27:52 PM

Yes sir you are 100% correct about them needing to know right now to close these backdoors. Do you have a problem with hosting a private membership section for those that do use your code for their website. One that would allow them access to a secure site where only they can have access to your details.

Most people may not worry about where or how they got the script to use on a faucet. Like I can a S2Membership plugin on wordpress that only allows members if I approve them. And it is hard to get into it since i verify that they are who they say they are. And yours could be adapted to verifying that they use your script and it come from you if they wish to get details from the updates.

More like a private support for your script since you modified and made it secure now.

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 10:08:00 PM

Quote from: ardodd on August 04, 2016, 09:36:12 PM

Quote from: Gifted on August 04, 2016, 09:27:52 PM

Im just giving immediate patches at the moment the rest of the updates will be in the download when im finished

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 04, 2016, 10:57:19 PM

@Gifted,

I do apologize for pushing so hard. And I apologize for my impatience, as I understand your position and wanting to help others protect their sites and incomes from this script. I can not only be an idiot but also a pushy idiot.

My Apologies.....

ardodd

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 04, 2016, 11:03:09 PM

Quote from: ardodd on August 04, 2016, 10:57:19 PM

no, it was a good idea ...so dont worry

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on August 05, 2016, 12:39:44 AM

Quote from: sabotag3x on August 04, 2016, 09:21:11 AM

Quote from: Gifted on August 04, 2016, 09:18:28 AM

Quote from: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

says im on a proxie and im not

Yeap, other user tell me the same thing, I'm trying to fix it..
With this code I'm blocking everyone ??? ??? ???

Code:

<?PHP
 
IF(ISSET($_SERVER['HTTP_X_FORWARDED_FOR']) || ($_SERVER['HTTP_USER_AGENT']=='') || ($_SERVER['HTTP_VIA']!='')){
        DIE("Proxy servers not allowed.");
}
 
$proxy_headers = ARRAY(   
     'HTTP_VIA',   
     'HTTP_X_FORWARDED_FOR',   
     'HTTP_FORWARDED_FOR',   
     'HTTP_X_FORWARDED',   
     'HTTP_FORWARDED',   
     'HTTP_CLIENT_IP',   
     'HTTP_FORWARDED_FOR_IP',   
     'VIA',   
     'X_FORWARDED_FOR',   
     'FORWARDED_FOR',   
     'X_FORWARDED',   
     'FORWARDED',   
     'CLIENT_IP',   
     'FORWARDED_FOR_IP',   
     'HTTP_PROXY_CONNECTION'   
        );
FOREACH($proxy_headers AS $x){
     IF (ISSET($_SERVER[$x])) DIE("You are using a proxy.");
        EXIT;
}
 
?>

and with other script, any proxy can enter on the faucet.. ??? ??? well.. I go to sleep and try again tomorrow

I'll try to help.

That proxy header from that code, try to put that in in your .htaccess file, then instead of that PHP code, try this and put it above <!DOCTYPE html> in your template public_html/yourfaucet/style/template/index.php:

Like this:

Code:

<?php if( @fsockopen( $_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1 ) )
{
echo "<h2 align=center>It appears that you are using a PROXY, please BE FAIR! </h2>";
   exit;
}
?>

<!DOCTYPE html>

Then test it in boomproxy, then after accessing your site in boomproxy click the clear cookies link and see if proxy blocking is successful. It should result like this:

https://i.imgur.com/xMLZEUJ.png

Hope that helps even a little.

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 05, 2016, 01:03:45 AM

Quote from: alfaboy23 on August 05, 2016, 12:39:44 AM

Quote from: sabotag3x on August 04, 2016, 09:21:11 AM

Quote from: Gifted on August 04, 2016, 09:18:28 AM

Quote from: sabotag3x on August 04, 2016, 08:49:53 AM

I'm testing your scripts here Gifted http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
less the adblock one(got some bug here)
Thanks for all!

says im on a proxie and im not

Yeap, other user tell me the same thing, I'm trying to fix it..
With this code I'm blocking everyone ??? ??? ???

Code:

<?PHP
 
IF(ISSET($_SERVER['HTTP_X_FORWARDED_FOR']) || ($_SERVER['HTTP_USER_AGENT']=='') || ($_SERVER['HTTP_VIA']!='')){
        DIE("Proxy servers not allowed.");
}
 
$proxy_headers = ARRAY(   
     'HTTP_VIA',   
     'HTTP_X_FORWARDED_FOR',   
     'HTTP_FORWARDED_FOR',   
     'HTTP_X_FORWARDED',   
     'HTTP_FORWARDED',   
     'HTTP_CLIENT_IP',   
     'HTTP_FORWARDED_FOR_IP',   
     'VIA',   
     'X_FORWARDED_FOR',   
     'FORWARDED_FOR',   
     'X_FORWARDED',   
     'FORWARDED',   
     'CLIENT_IP',   
     'FORWARDED_FOR_IP',   
     'HTTP_PROXY_CONNECTION'   
        );
FOREACH($proxy_headers AS $x){
     IF (ISSET($_SERVER[$x])) DIE("You are using a proxy.");
        EXIT;
}
 
?>

and with other script, any proxy can enter on the faucet.. ??? ??? well.. I go to sleep and try again tomorrow

Code:

<?php if( @fsockopen( $_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1 ) )
{
echo "<h2 align=center>It appears that you are using a PROXY, please BE FAIR! </h2>";
   exit;
}
?>

<!DOCTYPE html>

Then test it in boomproxy, then after accessing your site in boomproxy click the clear cookies link and see if proxy blocking is successful. It should result like this:

https://talkimg.com/images/2023/07/24/QUO9f.png

Hope that helps even a little.

Like a glove! (I think).. My IP is blacklisted on a lot of services so I can't test at all.. and I can't renew lol
Thank you alfaboy!
I think it's working http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
anyone give me a feedback please

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 05, 2016, 01:35:07 AM

I have same thing but i still let them go to page just not claim.

Security Patch V1.2 :

Got to index.php in the main root and find this:

Code:

$response = @file('http://verify.solvemedia.com/papi/verify?privatekey=' . $settings['solvemedia_verification_key'] . '&challenge=' . rawurlencode($captchaChallange) . '&response=' . rawurlencode($captchaResponse) . '&remoteip=' . $ip);

  if (!isset($response[0]) || trim($response[0]) === 'false'){
    $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Wrong captcha!</p></div></div>';
    $message                     = "Wrong captcha";
  }
  
$q = $sql->prepare("select * from users where LOWER(username) = LOWER(?) or ip = ? order by claimed_at desc");
  $q->execute(array($username,$ip));
  $row = $q->fetch();

Put this code right underneath the one you find above:

Code:

//We do not allow proxy here

 if(@fsockopen($_SERVER['REMOTE_ADDR'], 80, $errstr, $errno, 1))
{ 
  $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-danger"><p>Bots not allowed !! If you are not a bot and not on a proxy, i still cant help you !</p></div></div>';
    $message                     = "Proxy";
    goto error; 
  }
  //end proxie check

This will stop proxies if they try to claim and throw a message as you can see in the picture

http://bitcoinfaucetrelay.com/wp-content/uploads/2016/08/bot.png

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on August 05, 2016, 02:24:49 AM

IMHO, we should totally blockout bad ISP and do not show anything to the users with bad ISPs since it is giving bad traffic to the network ads.

Title: Re: XAPO Script - Hacked
Post by: alfaboy23 on August 05, 2016, 08:54:05 AM

Quote from: sabotag3x on August 05, 2016, 01:03:45 AM

-snip-

Like a glove! (I think).. My IP is blacklisted on a lot of services so I can't test at all.. and I can't renew lol
Thank you alfaboy!
I think it's working http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)
anyone give me a feedback please

No problemo ;)

Anyway, your website says "Browser not supported". I'm using Firefox. Have you also block the Chrome?
If this is about the plug-ins/add-ons, then we should think of other way to block just the plug-in/add-ons and not the browser.

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 05, 2016, 09:07:50 AM

Quote from: alfaboy23 on August 05, 2016, 08:54:05 AM

Quote from: sabotag3x on August 05, 2016, 01:03:45 AM

Quote from: felicita on August 05, 2016, 08:38:28 AM

now this mesage comes and i cant acces -.- `?
iam using firefox ??

Code:

Browser not supported!

Yeap, I got a lot of bot attack comming from Firefox, so I blocked it, sorry..
https://talkimg.com/images/2023/07/24/QUpSG.png
80%+ firefox access was bots.. don't know if it was the extensions(sql injection, proxys) or the bot use this plataform

Yeap, I tried to find something to block extensions.. however I think it can't be done..
You can easily find proxy/sql injection extensions on firefox.. and chrome too, however I don't blocked chrome(yet hahah)
I was thinking about make a custom browser wich users can visit faucets.. you know? without extensions, with a good faucet list/rotator.. well, I don't have knowledge to do this(and the other question is the ads clicks, maybe it can get a lower click rate)

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 09:55:19 AM

k - i opened my faucet again https://faucet.today (https://faucet.today) .. if something goes wrong i will send you the bill gifted :D

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 10:04:42 AM

Quote from: sabotag3x on August 05, 2016, 09:07:50 AM

Yeap, I got a lot of bot attack comming from Firefox, so I blocked it, sorry..
https://i.imgur.com/MGCSy6J.png
80%+ firefox access was bots.. don't know if it was the extensions(sql injection, proxys) or the bot use this plataform

Yeap, I tried to find something to block extensions.. however I think it can't be done..
You can easily find proxy/sql injection extensions on firefox.. and chrome too, however I don't blocked chrome(yet hahah)
I was thinking about make a custom browser wich users can visit faucets.. you know? without extensions, with a good faucet list/rotator.. well, I don't have knowledge to do this(and the other question is the ads clicks, maybe it can get a lower click rate)

Can you tell me/us please how you block a browser .. thanx in advance

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 05, 2016, 10:37:35 AM

Quote from: 5ub_zer0 on August 05, 2016, 10:04:42 AM

Quote from: sabotag3x on August 05, 2016, 09:07:50 AM

Can you tell me/us please how you block a browser .. thanx in advance

Blocking Browsers is not the answer to your problem. All that shows is how many users that visit your site use that particular browser. I would think we are needing to look deeper into the way the browser is used once on your site. Cross reference Blacklist IP's against visitors and incorporate a lockout of those IP's. Anyone trying to use a BOT is going to try and use a fresh list of accepted Proxy's to access your site.

Say me for example I use my mobile phone as a hot spot or wifi hot spot. I am using the IP 205.197.242.169 and i ran a cross reference to Blacklist IP's. When I did that I tested my IP against a new tool called WebRTC and found that it was leaking my actual IP address. For more information on how these Thieves are stealing personal information read this post> http://whatismyipaddress.com/webrtc-test

And upon reading this article or post one may be able to use the WebRTC to find the actual IP behind the attacks and single them out. WebRTC is available for Chrome, FireFox, Opera and many more as it is the new and bestest thing going.

Happy Defending !!!!

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 11:01:21 AM

Its me again .. there are still one thing what i don't like ... i will try to explain as good as i can in english ...

Example:

Your Xapo Faucet has a Cooldown (Timer) of 15minutes until next claim is allowed.

OK here we go - a Visitor enter your Faucet solve the Captcha and Claim .. he stays on your really cool Site .. and after 15 minutes he can press F5 (Refresh) in browser .. a small window pops-up
and ask if you want to send the Formular again (dont know how it is called in english - see screenshot in German)
https://thoje.it/wp-content/uploads/2016/08/formular.png

If you answer with Yes .. the Browserwindows reloads/refreshs .. and you have automaticly claimed - without enter the Captcha again...

Now if a Black-hat have found a way how to disable the timer (ok we dont allow rightclicks and so on now ) he has only press F5 press Enter all time long .. and is happy ..

I am not a hero in Webdesign nor php .. but maybe a solution is to set the cookielifetime to 5mins ? or has it something to do with the session ? .. any ideas ?

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 11:08:08 AM

Quote from: ardodd on August 05, 2016, 10:37:35 AM

Blocking Browsers is not the answer to your problem.

yes i am with you .. i just asked because i would like to know if there is a comfortabler way as baning a specific user-agent in htaccess ...

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 05, 2016, 11:22:59 AM

Quote from: 5ub_zer0 on August 05, 2016, 11:01:21 AM

Let me see if one of Xapo sites like you say where I can actually use the F5 and reclaim without a Captcha. BRB on that this one.

I have 2 Xapo Wallet sites open ( MoonBitco.in and Whalebitco.in ) and one none Xapo site open ( Claim BTC ) will run the F5 command in 2 minutes.

Ok I run the F5 command on all 3 sites and they give me the same results ( Incorrect Captcha )

Are we dealing with a weakess in the F5 Command for @Gifted's script. As I thought we had solved this previously and it was addressed by @Gifted.

I am old and sea-nile and I tend to forget what i just said so I maybe wrong.

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 11:43:16 AM

Quote from: ardodd on August 05, 2016, 11:22:59 AM

I have this only testet at my faucet .. maybe i am the only with this phenomen ?

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 05, 2016, 12:08:49 PM

Quote from: 5ub_zer0 on August 05, 2016, 11:43:16 AM

Quote from: ardodd on August 05, 2016, 11:22:59 AM

I have this only testet at my faucet .. maybe i am the only with this phenomen ?

What was your faucet and I will see if it is possible for me to access and duplicate what you are saying?

Title: Re: XAPO Script - Hacked
Post by: Salmen on August 05, 2016, 12:16:19 PM

The solution of blocking all proxies is still not a good solution at all. It blocks almost all proxies. With an advanced proxy is it possible to bypass the proxy detection.

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 12:30:18 PM

Quote from: ardodd on August 05, 2016, 12:08:49 PM

What was your faucet and I will see if it is possible for me to access and duplicate what you are saying?

https://faucet.today (https://faucet.today)

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 05, 2016, 12:42:44 PM

Quote from: Salmen on August 05, 2016, 12:16:19 PM

The solution of blocking all proxies is still not a good solution at all. It blocks almost all proxies. With an advanced proxy is it possible to bypass the proxy detection.

some proxys like the elite proxys could not detected with this described solution in this thread .. the faucetbox script can do it - if nastyhost is enabled (maybe it works disabled too) and claim with a elite proxy it will a message appear "invalid address" ... testet on my faucets

@salmen are your ISP Telekom ? .. because i got on the most faucets a vpn/proxy denied message with my normal connection .. so i have to use my private proxy (no worry guys - i am to old for making nonsens^^) .. than it works (funny or) .. only at faucetboxscript not as mentioned above

but anyway if i read things like the connector and proxyswitcher and all this .. makes me sad ...

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 05, 2016, 06:16:24 PM

Quote from: 5ub_zer0 on August 05, 2016, 11:01:21 AM

i just fixed that if you read the security patch for xapo.

Patch V1.1[/b]

find this code

Code:

if($response->success){
      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and replace with this

Code:

if($response->success){
   header('Refresh: 30;url=[b]change to your faucets url[/b]');
 $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

Title: Re: XAPO Script - Hacked
Post by: Salmen on August 05, 2016, 06:27:28 PM

Quote from: 5ub_zer0 on August 05, 2016, 12:42:44 PM

Quote from: Salmen on August 05, 2016, 12:16:19 PM

The solution of blocking all proxies is still not a good solution at all. It blocks almost all proxies. With an advanced proxy is it possible to bypass the proxy detection.

My ISP is currently not Telekom and thereby can't check it now. However, the elite proxy is a problem and the windows vps.

Why is still no solution to block ISP? Isn't it weird if a user use proxy using vps?

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 05, 2016, 10:39:49 PM

Quote from: 5ub_zer0 on August 05, 2016, 10:04:42 AM

Can you tell me/us please how you block a browser .. thanx in advance

I'm using this code

Code:

<?php
// Blocks Browser Multiple 
$get_name_browser = $_SERVER['HTTP_USER_AGENT']; // Get Name Broswer
$block_browser    = array("Avant Browser","Firefox","Yandex", "Opera","ELinks","SeaMonkey","Chromium","Iceweasel","Konqueror","WebKit Nightly","Iron","Pale Moon","Epiphany"); // Name Broswer Block

foreach($block_browser as $new){

    if(preg_match("/".$new."/",$get_name_browser)){
        die("<h2>Browser not supported!</h2>");    
    }

}
//
?>

I don't read all replys here yet, after I'll read and reply.. just leaving the code here

edit:

Quote from: 5ub_zer0 on August 05, 2016, 11:08:08 AM

Quote from: ardodd on August 05, 2016, 10:37:35 AM

Blocking Browsers is not the answer to your problem.

yes i am with you .. i just asked because i would like to know if there is a comfortabler way as baning a specific user-agent in htaccess ...

yeap, I know it's not the answer, however I have to try something.. I don't care about losing some access by firefox since I block some bot attack.. better a little revenue then losses

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 05, 2016, 10:59:15 PM

Quote from: sabotag3x on August 05, 2016, 10:39:49 PM

Quote from: 5ub_zer0 on August 05, 2016, 10:04:42 AM

Can you tell me/us please how you block a browser .. thanx in advance

I'm using this code

Code:

<?php
// Blocks Browser Multiple 
$get_name_browser = $_SERVER['HTTP_USER_AGENT']; // Get Name Broswer
$block_browser    = array("Avant Browser","Firefox","Yandex", "Opera","ELinks","SeaMonkey","Chromium","Iceweasel","Konqueror","WebKit Nightly","Iron","Pale Moon","Epiphany"); // Name Broswer Block

foreach($block_browser as $new){

    if(preg_match("/".$new."/",$get_name_browser)){
        die("<h2>Browser not supported!</h2>");    
    }

}
//
?>

I don't read all replys here yet, after I'll read and reply.. just leaving the code here

this will stop bots because they use firefox.. an old version to use with bots great job !!

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 05, 2016, 11:40:51 PM

Try using your windows vps on my site http://www.bitcoinfaucetexchange.com/ (http://www.bitcoinfaucetexchange.com/)

testing this

Code:

<?php

/*
 * This file is part of the Symfony package.
 *
 * (c) Fabien Potencier <fabien@symfony.com>
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

/**
 * Http utility functions.
 *
 * @author Fabien Potencier <fabien@symfony.com>
 */
class IpUtils
{
    /**
     * This class should not be instantiated.
     */
    private function __construct()
    {
    }

    /**
     * Checks if an IPv4 or IPv6 address is contained in the list of given IPs or subnets.
     *
     * @param string       $requestIp IP to check
     * @param string|array $ips       List of IPs or subnets (can be a string if only a single one)
     *
     * @return bool Whether the IP is valid
     */
    public static function checkIp($requestIp, $ips)
    {
        if (!is_array($ips)) {
            $ips = array($ips);
        }

        $method = substr_count($requestIp, ':') > 1 ? 'checkIp6' : 'checkIp4';

        foreach ($ips as $ip) {
            if (self::$method($requestIp, $ip)) {
                return true;
            }
        }

        return false;
    }

    /**
     * Compares two IPv4 addresses.
     * In case a subnet is given, it checks if it contains the request IP.
     *
     * @param string $requestIp IPv4 address to check
     * @param string $ip        IPv4 address or subnet in CIDR notation
     *
     * @return bool Whether the request IP matches the IP, or whether the request IP is within the CIDR subnet.
     */
    public static function checkIp4($requestIp, $ip)
    {
        if (false !== strpos($ip, '/')) {
            list($address, $netmask) = explode('/', $ip, 2);

            if ($netmask === '0') {
                // Ensure IP is valid - using ip2long below implicitly validates, but we need to do it manually here
                return filter_var($address, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4);
            }

            if ($netmask < 0 || $netmask > 32) {
                return false;
            }
        } else {
            $address = $ip;
            $netmask = 32;
        }

        return 0 === substr_compare(sprintf('%032b', ip2long($requestIp)), sprintf('%032b', ip2long($address)), 0, $netmask);
    }

    /**
     * Compares two IPv6 addresses.
     * In case a subnet is given, it checks if it contains the request IP.
     *
     * @author David Soria Parra <dsp at php dot net>
     *
     * @see https://github.com/dsp/v6tools
     *
     * @param string $requestIp IPv6 address to check
     * @param string $ip        IPv6 address or subnet in CIDR notation
     *
     * @return bool Whether the IP is valid
     *
     * @throws \RuntimeException When IPV6 support is not enabled
     */
    public static function checkIp6($requestIp, $ip)
    {
        if (!((extension_loaded('sockets') && defined('AF_INET6')) || @inet_pton('::1'))) {
            throw new \RuntimeException('Unable to check Ipv6. Check that PHP was not compiled with option "disable-ipv6".');
        }

        if (false !== strpos($ip, '/')) {
            list($address, $netmask) = explode('/', $ip, 2);

            if ($netmask < 1 || $netmask > 128) {
                return false;
            }
        } else {
            $address = $ip;
            $netmask = 128;
        }

        $bytesAddr = unpack('n*', inet_pton($address));
        $bytesTest = unpack('n*', inet_pton($requestIp));

        for ($i = 1, $ceil = ceil($netmask / 16); $i <= $ceil; ++$i) {
            $left = $netmask - 16 * ($i - 1);
            $left = ($left <= 16) ? $left : 16;
            $mask = ~(0xffff >> $left) & 0xffff;
            if (($bytesAddr[$i] & $mask) != ($bytesTest[$i] & $mask)) {
                return false;
            }
        }

        return true;
    }
}

Title: Re: XAPO Script - Hacked
Post by: viralalert on August 06, 2016, 02:27:59 AM

Quote from: sabotag3x on August 05, 2016, 10:39:49 PM

Quote from: 5ub_zer0 on August 05, 2016, 10:04:42 AM

Can you tell me/us please how you block a browser .. thanx in advance

I'm using this code

Code:

<?php
// Blocks Browser Multiple 
$get_name_browser = $_SERVER['HTTP_USER_AGENT']; // Get Name Broswer
$block_browser    = array("Avant Browser","Firefox","Yandex", "Opera","ELinks","SeaMonkey","Chromium","Iceweasel","Konqueror","WebKit Nightly","Iron","Pale Moon","Epiphany"); // Name Broswer Block

foreach($block_browser as $new){

    if(preg_match("/".$new."/",$get_name_browser)){
        die("<h2>Browser not supported!</h2>");    
    }

}
//
?>

You must add a message something like this "Browser not supported, Please use google chrome".

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 06, 2016, 04:01:03 PM

Quote from: Gifted on August 05, 2016, 06:16:24 PM

i just fixed that if you read the security patch for xapo.

Patch V1.1[/b]

find this code

Code:

if($response->success){
      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and replace with this

Code:

if($response->success){
   header('Refresh: 30;url=[b]change to your faucets url[/b]');
 $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

i did this already implemented yesterday morning ...

Code:

    if($response->success){
      header('Refresh: 30;url=https://faucet.today');
   -snip-

and the problem was still there ..

but ardodd whould test it .. waiting for an answer

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 06, 2016, 04:25:44 PM

Quote from: 5ub_zer0 on August 06, 2016, 04:01:03 PM

Quote from: Gifted on August 05, 2016, 06:16:24 PM

i just fixed that if you read the security patch for xapo.

Patch V1.1[/b]

find this code

Code:

if($response->success){
      $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

and replace with this

Code:

if($response->success){
   header('Refresh: 30;url=[b]change to your faucets url[/b]');
 $view['main']['result_html'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Congratulations you have won '.$amount.' Satoshis !!!</p></div></div>';
      $url = get_main_url()."?r=".$username;
      $view['main']['ref_link'] = '<div class="row text-center"><div class="col-sm-6 col-md-offset-3 bg-success"><p>Share your referal link and earn a '.$settings["referral_percentage"].'% lifetime bonus. Your referal link is '.$url.'</p></div></div>';

i did this already implemented yesterday morning ...

Code:

    if($response->success){
      header('Refresh: 30;url=https://faucet.today');
   -snip-

and the problem was still there ..

but ardodd whould test it .. waiting for an answer

its a 30m second timer... you can change where its highlited header('Refresh: 30;url=change to your faucets url');

take out the bold code where the address goes.. that does not go there

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 08, 2016, 12:42:24 PM

Can someone try to use any proxy/vpn in my faucet? By "use" I mean CLAIM.. and give me a feedback please!
http://www.bitcoinamerica.com.br/faucet (http://www.bitcoinamerica.com.br/faucet)

Thanks a lot!

Title: Re: XAPO Script - Hacked
Post by: 5ub_zer0 on August 08, 2016, 12:54:22 PM

Quote from: sabotag3x on August 08, 2016, 12:42:24 PM

Notice: REFERER CHECK FAILED, ASSUMING CSRF! in /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php on line 100 Warning: Cannot modify header information - headers already sent by (output started at /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php:100) in /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php on line 356 Notice: Banned: xxx.xxx.xxx.xxx in /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php on line 309

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 08, 2016, 04:57:27 PM

Quote from: sabotag3x on August 08, 2016, 12:42:24 PM

Notice: Banned: 46.101.138.168 in /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php on line 309

Title: Re: XAPO Script - Hacked
Post by: sabotag3x on August 09, 2016, 06:29:12 AM

Quote from: 5ub_zer0 on August 08, 2016, 12:54:22 PM

Quote from: sabotag3x on August 08, 2016, 12:42:24 PM

Quote from: Gifted on August 08, 2016, 04:57:27 PM

Quote from: sabotag3x on August 08, 2016, 12:42:24 PM

Notice: Banned: 46.101.138.168 in /customers/c/f/6/bitcoinamerica.com.br/httpd.www/faucet/script/common.php on line 309

Thanks! I think it's working, I can't block all VPN/Proxy/TOR systems however it can block a lot of services..
I banned 15.000 ASNs

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 12, 2016, 03:44:49 AM

I am so sorry for not being around everyone. This is one of those weeks no cares to go through. I am fighting cancer and it is not pretty. And on top of that i am fighting diabetes at the same time.

Spent all week in hospital with blood sugar levels at or above 500 and infections. Just have not had the energy to even get online til now.

I was trying to catch up some but things are kind of cobb webbed inside my head right now. So if someone could catch me up on where we are with the security i would love to get back into the conversation.

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 12, 2016, 04:07:45 AM

Quote from: ardodd on August 12, 2016, 03:44:49 AM

Well it seems in our combined efforts bot are no more. I believe the most significance is the fact that firefox is used with bots and is blocked on my faucet.Also the captcha reset was another flaw was fixed... seems all is well

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 12, 2016, 04:28:13 AM

@Gifted,

Do you know how to make a searchable database that would host the Faucet List. I had time on my hands this week and remember back in 2000 when I first started doing online html and coding i had a website that i made which had a interface I could actually program myself.

Back then it was simple as all i did was create a database of websites, and then broke them down into specific categories for what they did. And created a simple search where anyone could enter the category they were interested in and then check the radio boxes for which specific areas they wanted to lookup.

Example:
http://www.imagehostingforall.com/images/ardodd/simplesearchabledatabasefrontend.png

I was pondering that thought about all these Faucets. As it would need to be able to scrap for Faucet sites and then be able to host the information. The developer would have the advantage as when they are found he/she would have to join that Faucet so others could see it. I was pondering on this while laying i the hospital bed. And had seen a big list on Faucet List that had Bitcoin, Dogecoin, Peercoin, Darkcoin, Litecoin, etc...and noticed that a Xapo List was not available. And with so many cryptocurrencies I remember having a multi-wallet with Cryptonator that had many wallets.

But am asking if one could code a database interface like above to list all these Faucets and make it use your crypto-wallet address to join them. One at a time so when opening up the program the complete list comes up and they can check off the websites as they surf for coins. I DO NOT want a bot to do the work, only to register for all the sites with. The parameters could be anything from amount of coins collected to time in between intervals. Say you have 100 websites with 5 minute intervals we could create one parameter for them. And every different time frame could be a set of parameters. Or we could set parameters for alphabetical listing. The possibilities is endless on parameters.

One of the things i figured needed would be a way to store the e-wallet addresses so it can be entered according that sites crypto-currency. The e-wallet addresses would have to be stored off-site for the users protection and only pulled up if they log into it securely to use the database.

I don't know if you would want to do something like that or not, but I am interested in seeing if you could make something like this and make dam sure that a BOT can not join the website with a firewall.

***Update***

I had a feeling that my computer had been infected so out of curiousity I used Norton Power Eraser even after I used MalwareBytes Anti-Malware to check my computer for any virus. And not surprised at all i found 3 trojans attached to .exe files. What amazed me is that it was called molested.exe and it was attached to one of my Processor programs. I can remember one day my computer shut down completely and I had to manually restart it. And when I did it told me that one or more of my drivers had stopped working or was going out. So it led me to what looked exactly like a Toshiba Official page and pulled up that Drive and so called updated it. To find out that it come from Faucet that had a backdoor virus which had a popup virus. And once the darn computer started opening page after page at a astounding rate i knew something got through the firewall.

But anyways the morale to the story is that the attacks may not be because of a security issue on the website, but a security issue on our computer itself in the Root or .exe files where they are able to communicate with your site through the Root or .exe file

Just a simple reminder to scan the Root files and .exe files even if you think you virus protection is up to date and see a warning to repair or upgrade. Watch it with multiple virus scans that remove trojans.

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 12, 2016, 04:29:30 AM

Quote from: Gifted on August 12, 2016, 04:07:45 AM

Quote from: ardodd on August 12, 2016, 03:44:49 AM

Great job !!!!! I felt like Firefox and the iMacros would cause problems.

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 12, 2016, 08:10:23 PM

Quote from: ardodd on August 12, 2016, 04:29:30 AM

Quote from: Gifted on August 12, 2016, 04:07:45 AM

Quote from: ardodd on August 12, 2016, 03:44:49 AM

Great job !!!!! I felt like Firefox and the iMacros would cause problems.

About your virus... just use this only https://www.microsoft.com/en-us/download/details.aspx?id=5201 (https://www.microsoft.com/en-us/download/details.aspx?id=5201) Most virus's comes from antivirus !

Title: Re: XAPO Script - Hacked
Post by: Gifted on August 12, 2016, 08:14:51 PM

Quote from: ardodd on August 12, 2016, 04:28:13 AM

This wont happen unless all faucets are built the same... the hard part is getting all the faucets to be able to bind with our site and this will never happen. each website is different so the code would have to me crazy ! Unless you go with standerd faucetbox then it might work but those usually fail in a month or so because of lack of coding, experience ETC.

Title: Re: XAPO Script - Hacked
Post by: ardodd on August 12, 2016, 10:15:51 PM

I would say so. Seem to be too many Fly-by-Night shops setting up now.

Guess most of them don't realize that you have to make a commitment long term as the ads on the Faucet are mostly referral Faucets and/or Adsense which are long-long term commitments.

Shoot I have 10 websites and they all have Adsense and in 5 years i have made $9.45 from it. Not even enough to to meet withdrawal limit.

Some don't realize that they income from the site to sustain the Faucet payout commitment on their end. It is not something you buy $50 worth of Bitcoins and payout slowly depending on the amount of traffic and of course BOT's stealing too.

By-the-way what kind of drugs was I on when I posted this last night???? Must of been good too.

Bitcoin Forum

Economy => Micro Earnings => Topic started by: 5ub_zer0 on July 21, 2016, 06:33:11 PM