Blackhat SEO— Blackhat SEO »

Anti-spam lawyer gets what he had coming. First he set up a phony ISP. Then he sued Virtumundo under CAN-SPAM. He lost the case and was ordered to pay Virtumundo $100,000. He appealed the decision. Debt collector took stuff from his home. Virtumundo offered to give him back his stuff if he drops the appeal. He refused.

Well, he finally lost the appeal. (via)

Deciphering Decaptcher’s protocol

countzero — Sat, 29 Aug 2009 21:17:38 +0000

Decaptcher has a TCP socket and an HTTP API. This is a description of the socket API, deciphered from Decaptcher’s official PHP client. You can also look at my version of the Decaptcher PHP client that I posted recently. The following will come in handy if you’d like to code your own client.

The socket API uses a 6 byte header containing protocol_version/command_code/data_size. Let’s call this the cc-header.

protocol_version is there for keeping old code functioning when the protocol changes. Currently, version is still 1.

command_code is used for actual commands as well as error codes.

data_size tells you the size of data in bytes following the cc-header. Size often is 0.

If you are sending a picture or receiving picture text there’s a second header following the cc-header. Let’s call this the pic-header.

The pic-header is 20 bytes long and contains pic_timeout/pic_type/data_size/major_id/minor_id.

pic_timeout is used to tell Decaptcher how much time it has to get the captcha back to you.

pic_type serves as an affiliate application id, as far as I know.

data_size is the size in bytes that will follow the pic-header.

major_id and minor_id are sent to you when you get picture text, they are used when reporting picture text as bad.

You append your image binary after the pic-header, when you are sending.

Picture text comes after the pic-header, when you are receiving.

Logging in:

Open socket to Decaptcher’s server.
Send cc-header, command_code=1, followed by your username.
Receive 32 byte salt, with command_code=3.
Using sha256, hash the salt,md5 of your password and username (in this order).
Send the hash along with a cc-header and command_code=4.
Receive cc-header with command_code=7.

Sending a picture:

Must be logined.
Send cc-header with command_code=12, then a pic-header and then the picture binary.
Wait on the socket until you get a cc-header with command_code=14. A pic-header and picture text will follow. You must store the major_id and minor_id you get in the pic-header preceding the picture text (in order to report bad picture text).
If command_code is not 14 then it’s an error code.

Notifying of bad picture text:

Must be logined.
Send a cc-header with command_code=13, then a pic-header containing the major_id and minor_id that came back with the picture text.

Getting your API credits balance:

Must be logined.
Send a cc-header with command_code=10.
Receive a cc-header with command_code=10 and the balance follows as text.

Logging out:

Must be logined.
Send a cc-header with command_code=2.
Close the socket.

The command codes:

‘cmdCC_UNUSED’, 0
‘cmdCC_LOGIN’, 1 // login
‘cmdCC_BYE’, 2 // end of session
‘cmdCC_RAND’, 3 // random data for making hash with login+password
‘cmdCC_HASH’, 4 // hash data
‘cmdCC_PICTURE’, 5 // picture data, deprecated
‘cmdCC_TEXT’, 6 // text data, deprecated
‘cmdCC_OK’, 7 // ok
‘cmdCC_FAILED’, 8 // failed
‘cmdCC_OVERLOAD’, 9 // server overloaded
‘cmdCC_BALANCE’, 10 // zero balance
‘cmdCC_TIMEOUT’, 11 // time out occured
‘cmdCC_PICTURE2′, 12 // picture data
‘cmdCC_PICTUREFL’, 13 // picture failure
‘cmdCC_TEXT2′, 14 // text data

Picture timeout codes:

‘ptoDEFAULT’, 0 // default timeout, server-specific
‘ptoLONG’, 1 // long timeout for picture, server-specfic
‘pto30SEC’, 2 // 30 seconds timeout for picture
‘pto60SEC’, 3 // 60 seconds timeout for picture
‘pto90SEC’, 4 // 90 seconds timeout for picture

The default picture type:

‘ptUNSPECIFIED’, 0 // picture type unspecified

Flash cookies

countzero — Sat, 29 Aug 2009 20:10:14 +0000

A useful example, plus source code, of setting Flash cookies via javascript. Also of interest: SWFObject and jsSO.

Tarpipe

countzero — Thu, 27 Aug 2009 18:21:50 +0000

Tarpipe would make for an excellent spamming engine.

Decaptcher PHP API

countzero — Tue, 25 Aug 2009 10:54:18 +0000

I rewrote Decaptcher’s PHP monstrosity yesterday. My version is a single class and doesn’t use three dozen constants. You can find the source below:

http://svn.blackhat-seo.com/stuff/php/Decaptcher/

Links for 2009-05-07 [del.icio.us]

Fri, 08 May 2009 00:00:00 PDT

piqq.us - Digg . Stumble . Propeller
Our members exchange social votes on Digg, StumbleUpon and Propeller. You digg some stories and earn Points. Spend those Points to have your own stories dugg.
Targeted Advertising Cookie Opt-Out (TACO)
EasyList Filters for Adblock Plus
MyAutoBlogger - Human Powered Automatic Blogging

Links for 2009-05-06 [del.icio.us]

Thu, 07 May 2009 00:00:00 PDT

Packet Flip - Highly Anonymous/Elite U.S. HTTP Private Proxies
Packet Flip offers proxies in geographically diverse locations in the United States. Servers are located in seven different states. Furthermore, our proxy IP addresses are non-sequential and are available in multiple class A, B, and C networks to ensure the greatest security and anonymity.
The Spamhaus Project
Stumblebot - Automate your stumbleupon marketing
Local Online Business Advertising | Blitzlocal
Monetize Facebook
The BlitzLocal Facebook PPC Tool grabs conversion data from various sources, to calculate eCPM, conversion rate, and eCPC. It then automatically turns off under performing ads.
gocloaking.com
OnSameHost.com - Find all websites hosted on the same IP-address
SiteJunk - Content Generation
ProxyNexus Proxy Service
At ProxyNexus, our bots are constantly crawling hundreds of public, semiprivate, and private proxy lists, and extracting all of the proxies there. Proxy list sites, private proxy forums, paid proxy list services are all crawled by our bot. All extracted proxies are then checked for uptime, speed, and anonymity.
AutoStumble | Home
Subvert and Profit
Subvert and Profit runs an ever-expanding black market for votes on social media sites. We are simultaneously the easiest way to make money online and the cheapest form of advertising in the web 2.0 sphere. We are the crowdhackers, and we are very good at what we do.
About « SEO SPAM Cops
SEO SPAM COPS is true believers in justice! Our motto: * SEO Spammers should be targeted and made known for the rest of the world! * SEO Spammers should be analysed and reported to the Search Engines! * SEO Spammers should be given penalties that hurts! * SEO “Experts” that use Black Hat Techniques should be driven out of business!
S.Q.U.I.R.T.
SQUIRT stands for Super Quick Indexing & Ranking Tools. SQUIRT is an all in one and easy to use tool that helps your sites get indexed, deep indexed and ranking faster in the search engines.

Links for 2009-05-05 [del.icio.us]

Wed, 06 May 2009 00:00:00 PDT

Mailpress - wordpress plugin
With this plugin you will be able to send beautiful and styled html and plain text mails based on dedicated themes and templates for any e-mail notification issued for * comments subscribers, * your periodic newsletters or post notification (per post/daily/weekly/monthly), * specific admin events : registration of a new user, comment to moderate, new comment on your posts.
Realboy - Believable Twitter Bots
Project Realboy is an experimental effort to create believable Twitter bots, called Realboys. We feel obligated to mention that Twitter's Terms of Service state that "you must not abuse, harass, threaten, impersonate or intimidate other Twitter users." Our experiment does not violate Twitter's Terms of Service because we are not impersonating Twitter users, we are simply imitating them.
phpass_crack: Simple tool for cracking Wordpress hashes | Bandit Defense
I have written a simple tool for cracking Portable PHP password hashes, which Wordpress uses to hash user passwords. You pipe passwords to it and pass it a passwd file and it tries to crack the hashes.
Its a Bot: Finding all the bots on Twitter just for you
DroneBL
DroneBL is a realtime monitor of abusable IPs, which has the goal of stopping abuse of infected machines.
StopBadware.org - Welcome to StopBadware.org
Disposable, Temporary Phone Numbers | Private, Anonymous Telephone Services
Social Networking Bots - Friend Adder | Comments Poster | Message Sender | Accounts Creator | Classifieds Poster
PieSpy - Inferring and Visualizing Social Network on IRC
DOMinate the web! - Friend adder, mass messenger for all social networks | webDOMinator
myAdTools.com • Products
Top Professional Online IT Outsourcing SEO Company In India
Uber Bots - Products
Facebook Friend Adder | Twitter Friend Adder | MySpace Friend Adder | Hi-5 Friend Adder | Bebo Friend Adder
Магазин СЕО софта от Jonn22