XAPO Script - Hacked

[5ub_zer0]

My Xapo-Faucet faucet.today got attaked .. as you can see in the list below .. my 30min timer is useless :-) ..

Here is my statement of account:
https://xapofau.xyz/wp-content/uploads/2016/07/Personal-Wallet_2016-07-21.csv

Be careful all with the same script ...

[vodaljepa]

Is this the script Gifted was sharing with people on here?

[Gifted]

hmm, i see my faucet is getting hit with a bot with same email address.  I  have been trying to figure out a way to stop this but any faucet can be hit with this tech.

[Gifted]

I think i need to add a timer to email and btc addresses not just ip

[vodaljepa]

Gifted you sure you aren't behind these attacks? I will investigate the code and see if any backdoor was planted by you

[Salmen]

Gifted you sure you aren't behind these attacks? I will investigate the code and see if any backdoor was planted by you

I just reviewed fast the code and couldn't see any backdoors.

[alfaboy23]

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the user's IP is in, until now, I haven't been hit and I hope not ever.

[torbente]

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the IP is in, until now, I haven't been hit and I hope not ever.

Which country ? Could you say?

[alfaboy23]

I'm not too much knowledgeable in PHP, but I believed that Gifted's distributed script had no backdoors.

I was also hit previously but in a different approach (not the same hack method base on the OP's log), mine is this:

https://bitcointalk.org/index.php?topic=1517483.msg15274896#msg15274896

Then, I just block the whole country where the IP is in, until now, I haven't been hit and I hope not ever.

Which country ? Could you say?

It's from Ind0nes!a.
But before I block that country, I first block the IP ranges he used, but he just uses another IP range, but still in that country , and he hit me for the second time with the same method.
That's the time that I decided to block the whole country or technically, just most IP's on that country.
The effect is I do not have any visitors from that country anymore.

[Omegasun]

My Xapo-Faucet faucet.today got attaked .. as you can see in the list below .. my 30min timer is useless :-) ..

Here is my statement of account:
https://xapofau.xyz/wp-content/uploads/2016/07/Personal-Wallet_2016-07-21.csv

Be careful all with the same script ...

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

[Gifted]

I assure you there is no back doors in the script but someone is always smarter then the next. we must join together to figure out a solution to this problem for the sake of everyone.

[5ub_zer0]

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

[Gifted]

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

Wait. you had no admin   how dd you setup your faucet without it??  Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

[viralalert]

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

Wait. you had no admin   how dd you setup your faucet without it??  Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Wow! really! this would be great if you make a login page for a xapo faucet. I'm also using xapo faucet script and I have not had any problems with it. I'm happy using it. This is my first faucet I have ever created. You can check mine's faucet as well. http://viral-alert.com/xapo

If you ever created a login page for the script, I would love to share it with me. By the way do you know how to integrate antibot links to xapo faucet?

[5ub_zer0]

Wait. you had no admin  how dd you setup your faucet without it??  Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Sure there is admin ... and its a fork of the original Faucet-Builder what i written in the README ..but anyway everything on github can manipulated not only my one :-)

Yeah a login whould be nice ..

[5ub_zer0]

FYI - https://faucet.today is now online again .. with the version from gifted ..

[sabotag3x]

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

[Newcoins2020]

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

Collecting IP's is just the start, since proxy's are very cheap. Best way is to audit the script by a security expert.
If you don't do that, you run a risk being hacked and losing all your btc.
Best way is to make withdrawals manual if you are not sure about your scripts security.

[5ub_zer0]

This fu***ng Guy is back again .... now diabled reward system .. goin to sleep :-)

2016-07-23 21:28:30   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:29   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:19   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:19   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:18   Credit paid   0.00001000   0.00001000      EUR   0.01   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:18   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:18   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:09   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:06   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:06   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:02   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:28:02   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:41   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:40   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:39   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:38   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:08   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:27:07   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:53   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:52   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:46   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:45   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:34   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:33   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:09   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:08   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:26:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:50   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:49   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:46   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:38   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:30   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:29   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:25   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:24   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:21   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:20   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:13   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:12   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:02   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:25:01   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:58   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:57   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:36   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:35   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:35   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:34   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:31   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:30   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet 2016-07-23 21:24:10   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet

[5ub_zer0]

Cant sleep .. two things are very strange in my opinion and maybe usefull for investigation.

1. if you see the List above .. this guy gets also the refferals (25%) ?? ..

2. i dit not see an armee of bots (with analytics or piwik) .. just one ip from ukraine has ~18 activites but without an referallink. The other ips looking normal ...

Anyway .. i closed the Faucet .. maybe reopen if it is secure

P.S: i used the script from gifted

---
Strange peoples in a strange world ...