Title: Bitcoin / Altcoin Share Hack Script - Double Share $$$$$$ Post by: AlphaTrade on July 19, 2017, 05:27:35 PM This script makes it possible to force a Stratum Mining
Pool to accept "invalid" shares by the thousands for each mining pool round. It is possible to make pure money from this script ##### What is stratum mining ##### Most of the known mining pools allow to use the so called stratum mining pool protocol. The bitcoin and altcoin miner is configured to use the host address and port of the stratum miner protocol server. For example the eligius (http://eligius.st) mining pool offers a stratum connection for mining. This mining pool is *not* affected by this vulnerability. Once connected to the stratum server the miner will "do work" and solve a mathematical, crypto task. Once it has solved one of this tasks it will *submit* a so called *share* to the stratum server. The more shares the miners generate the more they are rewarded after a successful mining round has completed. The actual reward given to the miner much depends on the style of reward system used by the mining pool. Miners submit shares using the method "mining.submit" when operating with stratum. Client submissions contain: 1. Worker name 2. Job ID 3. ExtraNonce 2 4. nTime 5. Nonce The server will respond with a successful accepted share response or will reject the share submit request. Share submits can be sent at any time to the stratum server. The stratum server will accept only valid shares and in the case of this particular vulnerability stratum will accept *one* valid initial share and *thousands* of shares that follow the initial valid share but are "invalid" because they do not solve the mathematical task in any way. The vulnerable mining pool will accept the shares as pure payment of coins if left unnoticed. ===== Listing Number 1. ====== Code: this.processShare = function(jobId, previousDifficulty, difficulty, ===== Listing Number 1. ====== Code: this.registerSubmit = function(extraNonce1, extraNonce2, nTime, nonce){ At listing number 1. you can see the function that processes a submitted share. It will check for a valid shape of the mining.submit parameters. And finally call job.registerSubmit(...) at line 211 with this parameters to check if it handles a duplicate share. It *should* discard a duplicate share with a shareError and return from this javascript function. When we look into the registerSubmit function we see the lines: Code: *115.* var submission = extraNonce1 + extraNonce2 + nTime + nonce; So how can you submit the duplicate shares? It is rather easy. extraNonce1, extraNonce2, Nonce, nTime are HEX values. And everybody knows that HEX values can contain ASCII characters. Let's take an example of extraNonce1 being 0xDEADBEEF. What will registerSubmit function do with the share if we submit 0xdEADBEEF and then 0xdeADBEEF and then 0xdeaDBEEF and so on and so on. Well: the program will blindly accept the shares! This is because the registerSubmit function is case insensitive and the share is still valid by arithmetic. To Auto Buy - Follow - -.->>>>>> https://satoshibox.com/dyovjevqqkb26zvrsu6ynkpg <<<<<<<<< Title: Re: Bitcoin / Altcoin Share Hack Script - Double Share $$$$$$ Post by: AlphaTrade on July 27, 2017, 03:24:53 AM Earn Extra Money With Your Miner.......
Download Link above.. Support available... Earn, Earn, Earn,,,,, Title: Re: Bitcoin / Altcoin Share Hack Script - Double Share $$$$$$ Post by: BitcoinCoder on July 27, 2017, 03:32:26 AM why wont you just use it yourself as its so safe, working and profitable?
Title: Re: Bitcoin / Altcoin Share Hack Script - Double Share $$$$$$ Post by: AlphaTrade on July 27, 2017, 03:49:42 AM We do use it.. But we also want to sell it.
|