Results 1 to 4 of 4
  1. #1
    HetmanPLP's Avatar
    Join Date
    Jan 2016
    Gender
    male
    Posts
    1
    Reputation
    10
    Thanks
    0

    Can someone help me understand how this site works?

    Ok guys so yesterday some guy tried to scam me through steam. It's normal for steam but this scam was a little bit different. He send me a link to phishing site that looked like steam login page (standard for a trader) I wrote fake credentials just to maybe piss of a scammer but this time his site said that password or username is incorrect. I delved into scammer site more and I found that this site will ask you for mobile authenticator if you have one Not only that because it will also say you that whatever you type in mobile auth popup it will say it's wrong. Yeah I sound like a moron but I'm interested in PHP as a hobby and this scam showed me how little I know about PHP. Source code of scammer site is in attachment:
    This code is pretty long for simple scam which is odd (nearly 9000 lines of code) Can anyone explain me how this works? How does he made his site check if login credentials were correct? At least can someone point where script saving userass is?
    <b>Downloadable Files</b> Downloadable Files

  2. #2
    Het_Beest's Avatar
    Join Date
    Nov 2016
    Gender
    male
    Location
    Web
    Posts
    452
    Reputation
    58
    Thanks
    82
    My Mood
    Relaxed
    After a quick glance I'm pretty sure it's all JS/jQuery/AJAX and no PHP. AJAX handles the form inputs, but im not sure where it stores the info.

  3. #3
    MikeRohsoft's Avatar
    Join Date
    May 2013
    Gender
    male
    Location
    Los Santos
    Posts
    797
    Reputation
    593
    Thanks
    26,314
    Probably it will not even make sure, that the Login Info is correct.
    They just assume, the Target will insert correct data, so you get Logindata + 1x 2 Factor Auth Code.
    What u can do now with this, i'm not sure, but i'm pretty sure, it works like this and just gather everything before it submits all the data

  4. #4
    scriptkiddz007's Avatar
    Join Date
    Jun 2019
    Gender
    male
    Posts
    8
    Reputation
    10
    Thanks
    0
    Hey no offense but there isnt any line of php code and its also pretty advandced code(well with some weird codeparts and bad structure)! i suggest u to learn some javascript basics to get a small understanding of the code. its rlly to much to simply break it down here for a beginner and as u said u have some php knowledge but this programm ist javascript based

Similar Threads

  1. [Help] can someone help me to change this pattern to DWORD
    By iamnada in forum Counter-Strike 2 Coding & Resources
    Replies: 0
    Last Post: 08-30-2018, 08:27 PM
  2. Can someone help me on how to get hacks for for Fortnite mobile/free vbux
    By jeffjeff1738 in forum Fortnite Discussion & Help
    Replies: 6
    Last Post: 08-02-2018, 03:00 PM
  3. [Solved] Can Someone help me reverse engineer this Key stealer.
    By TheBigWiggie in forum DayZ Help & Requests
    Replies: 2
    Last Post: 07-04-2014, 09:41 PM
  4. Can someone help me out with this hack?
    By Dan_witherspoon in forum BlackLight Retribution Hacks
    Replies: 2
    Last Post: 08-11-2012, 06:57 AM
  5. [Help] CAN Someone help me to find this skin??!!! "Ahri, the nine Tailed Fox"
    By Joker4Hack in forum CrossFire Mods & Rez Modding
    Replies: 2
    Last Post: 04-10-2012, 10:50 AM