XAPO Script - Hacked - page 7. | Bitcointalksearch.org

viralalert

full member

Activity: 266

Merit: 100

Quote from: Gifted on July 24, 2016, 08:54:13 AM

Quote from: viralalert on July 24, 2016, 08:34:34 AM

Quote from: Gifted on July 24, 2016, 08:26:25 AM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

it will show deducted but will be refunded if account is invalid.. i can remember how many days but it might be 15 days if i remember right.. Alfaboy knows that answer.

HOw is it come that those email addresses have real names when I checked my xapo account. Having real names means that those accounts were verified. I have already contacted the support of xapo and I hope they can get back my bits taken from these email addresses.

Gifted

hero member

Activity: 504

Merit: 501

keep checking this post because i will be posting the download here soon for the fix

Gifted

hero member

Activity: 504

Merit: 501

Quote from: viralalert on July 24, 2016, 08:34:34 AM

Quote from: Gifted on July 24, 2016, 08:26:25 AM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

it will show deducted but will be refunded if account is invalid.. i can remember how many days but it might be 15 days if i remember right.. Alfaboy knows that answer.

viralalert

full member

Activity: 266

Merit: 100

Quote from: Gifted on July 24, 2016, 08:26:25 AM

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

I believe those email addresses were valid. It was deducted on my balance. If you're saying I will get refund, about how many days I can get it?

Gifted

hero member

Activity: 504

Merit: 501

I will be finished with some code for us in a few hours as far as the emails go there is no need to fix this because im sure he cannot have that many ID's lol

Gifted

hero member

Activity: 504

Merit: 501

viralalert

full member

Activity: 266

Merit: 100

Quote from: Gifted on July 24, 2016, 07:13:11 AM

I want everyone to know i have found a solution 99% sure this will work but will take some time to write.. i should be done in a few hours and will be able to implement into your faucet i promise. no adding code, just upload into the root and thats it.. i will let you guys know when im done.

Gifted

hero member

Activity: 504

Merit: 501

I want everyone to know i have found a solution 99% sure this will work but will take some time to write.. i should be done in a few hours and will be able to implement into your faucet i promise. no adding code, just upload into the root and thats it.. i will let you guys know when im done.

Gifted

hero member

Activity: 504

Merit: 501

Quote from: 5ub_zer0 on July 24, 2016, 06:10:09 AM

Quote from: FaucetRank.com on July 24, 2016, 05:41:38 AM

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

I never said that it is gifted .. just a information because i should give this/his version a try .. and the result was the same as with the original faucet-builder script i used in the first post.

I will investigate this problem and get back to you.

5ub_zer0

full member

Activity: 238

Merit: 100

Quote from: FaucetRank.com on July 24, 2016, 05:41:38 AM

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

I never said that it is gifted .. just a information because i should give this/his version a try .. and the result was the same as with the original faucet-builder script i used in the first post.

FaucetRank.com

hero member

Activity: 868

Merit: 500

Quote from: 5ub_zer0 on July 23, 2016, 07:28:26 PM

Cant sleep .. two things are very strange in my opinion and maybe usefull for investigation.

1. if you see the List above .. this guy gets also the refferals (25%) ?? ..

2. i dit not see an armee of bots (with analytics or piwik) .. just one ip from ukraine has ~18 activites but without an referallink. The other ips looking normal ...

Anyway .. i closed the Faucet .. maybe reopen if it is secure

P.S: i used the script from gifted

---
Strange peoples in a strange world ...

I don't think gifted is behind this kind of trick. It seems me that there is weak coding in the script that should be fixed and after this fix the script should work properly.

viralalert

full member

Activity: 266

Merit: 100

This is true, my site was attacked and a user zervo lemurian was able to claim every minute. I've disabled my api while investigate the issue. It's not something that it was hacked but it's something that they can reduce between the time of claim. If it's hacked for example they were able to get my xapo api key then they can still claim even I disabled the faucet. So we need to concentrate on the time of claim. Hopefully someone can help us.

5ub_zer0

full member

Activity: 238

Merit: 100

Cant sleep .. two things are very strange in my opinion and maybe usefull for investigation.

1. if you see the List above .. this guy gets also the refferals (25%) ?? ..

2. i dit not see an armee of bots (with analytics or piwik) .. just one ip from ukraine has ~18 activites but without an referallink. The other ips looking normal ...

Anyway .. i closed the Faucet .. maybe reopen if it is secure

P.S: i used the script from gifted

---
Strange peoples in a strange world ...

5ub_zer0

full member

Activity: 238

Merit: 100

This fu***ng Guy is back again .... now diabled reward system .. goin to sleep :-)

2016-07-23 21:28:30   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:29   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:19   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:19   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00001000   0.00001000      EUR   0.01   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:18   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:09   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:06   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:06   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:02   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:28:02   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:41   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:40   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:39   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:38   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:08   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:27:07   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:53   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:52   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:46   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:45   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:34   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:33   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:22   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:21   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:21   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:20   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:15   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:14   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:09   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:08   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:26:07   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:50   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:49   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:46   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:38   Credit paid   0.00000250   0.00000250      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:30   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:29   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:25   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:24   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:21   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:20   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:13   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:12   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:02   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:25:01   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:57   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:58   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:56   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:56   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:57   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:55   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:44   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:43   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:36   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:35   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:35   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:34   Credit paid   0.00000100   0.00000100      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:31   Credit paid   0.00000125   0.00000125      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:30   Credit paid   0.00000500   0.00000500      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet
2016-07-23 21:24:10   Credit paid   0.00000025   0.00000025      EUR   0.00   Complete      Yurii Yatskevych      xapo faucet

Newcoins2020

sr. member

Activity: 406

Merit: 250

Quote from: sabotag3x on July 23, 2016, 02:30:23 PM

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

Collecting IP's is just the start, since proxy's are very cheap. Best way is to audit the script by a security expert.
If you don't do that, you run a risk being hacked and losing all your btc.
Best way is to make withdrawals manual if you are not sure about your scripts security.

sabotag3x

legendary

Activity: 2688

Merit: 2297

We are all f*****, that's the truth, we need to collect all IP's range/btc address from bots and put it in the same topic

5ub_zer0

full member

Activity: 238

Merit: 100

FYI - https://faucet.today is now online again .. with the version from gifted ..

5ub_zer0

full member

Activity: 238

Merit: 100

Quote from: Gifted on July 22, 2016, 11:49:19 PM

Wait. you had no admin Huh

how dd you setup your faucet without it?? Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Sure there is admin ... and its a fork of the original Faucet-Builder what i written in the README ..but anyway everything on github can manipulated not only my one :-)

Yeah a login whould be nice ..

viralalert

full member

Activity: 266

Merit: 100

Quote from: Gifted on July 22, 2016, 11:49:19 PM

Quote from: 5ub_zer0 on July 22, 2016, 08:20:19 AM

Quote from: Omegasun on July 21, 2016, 08:54:28 PM

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

Wait. you had no admin Huh

how dd you setup your faucet without it?? Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Wow! really! this would be great if you make a login page for a xapo faucet. I'm also using xapo faucet script and I have not had any problems with it. I'm happy using it. This is my first faucet I have ever created. You can check mine's faucet as well. http://viral-alert.com/xapo

If you ever created a login page for the script, I would love to share it with me. By the way do you know how to integrate antibot links to xapo faucet?

Gifted

hero member

Activity: 504

Merit: 501

Quote from: 5ub_zer0 on July 22, 2016, 08:20:19 AM

Quote from: Omegasun on July 21, 2016, 08:54:28 PM

so many cheater today. hahaha. maybe because of the timer of the faucet is too long and the pay rate is too low. thats why they attempt to use bot. im dissappoint to the faucet user that using bot on faucet.. i am discourage now to create my own faucet. tsk

I dont have a problem with ot if a user have a script witch brings him to a faucet (like rotators) and only solve the captcha ... the problem ist if a user uses a lot of bots or find a way to disable to timer .. so he can make your faucet emtpy in a short time ...

The script i used is from here: https://github.com/destinybogan/Faucet-Builder the only thing what ive edited was the proxy detection i putted into the main index.php ... but maybe that was the problem .. at the moment i let my faucets down ..

Also i checked the server Server Against the HTTPoxy Vulnerability but it was ok ... also i had no phpmyadmin installed .. and as one of the few faucets around it was with ssl protected. So i have no idea whats going wrong but in the moment iam busy.

@Salem can you check my script too for a small tip ?

https://github.com/Subzeroxapo/xapo-script-hacked.git

Wait. you had no admin Huh

how dd you setup your faucet without it?? Also did you use a branch of the faucet you installed?? People can make changes in GitHub and save as a branch for someone to download.. Are you sure you downloaded the original?? Here why don't you use this one and see if this fixes the problem.. This is a clone of my faucet To use instead http://bitcoinfaucetrelay.com/wp-content/uploads/2016/06/Faucet-builder-clone-of-my-faucet.zip

Let me know if you still have problems !

I plan on making a login page for this faucet script for security, when i finish i will include in this download and notify everyone when finished.

Topic: XAPO Script - Hacked - page 7. (Read 6092 times)