Dropbox - we continue to be measured

It’s boring to work ... well. let's try to automate even more what was offered here and here =)

This time we only have the basy script. which allows you to quite easily and completely click on your referrals. Yes, the MAC address is automatically updated, so the need for a virtual machine is essentially eliminated ... Although I would still recommend manipulating the script on it. Well, simply because in the course of its work, the script engine periodically overwrites the drop-box config.

We look what happened and what to do about it ...
')

#!/bin/bash DEST=`pwd` #enter here your referal link from Dropbox REFLINK="http://db.tt/V1ESzte" download() { echo "Downloading Dropbox distributive..." cd wget -O dropbox.tar.gz "http://www.dropbox.com/download/?plat=lnx.x86" cd $DEST } update_mac() { echo "Update mac address..." ifconfig eth0 down ifconfig eth0 hw ether `printf '52:54:00:%02X:%02X:%02X\n' $((RANDOM%256)) $((RANDOM%256)) $((RANDOM%256))` ifconfig eth0 up dhclient eth0 ifconfig eth0 echo "MAC updated..." } extract() { echo "Unpack archive" rm -rf .dropbox-dist tar -tzf dropbox.tar.gz tar -xvzf dropbox.tar.gz } register() { cd echo "Registering new referal..." rm -rf .dropbox update_mac echo "Register new referral... Now enter random Login (like your_gmail_login+blablabla@gmail.com) and Password (like '123456'). Close Firefox after register new user!" firefox $REFLINK; echo "Choose 'I already have Dropbox account', enter your login and password. Click Next, and close installer. Repeat =)" ~/.dropbox-dist/dropboxd cd $DEST } case $1 in "download" ) download ;; "extract" ) extract ;; "register" ) register ;; * ) echo "Usage: Simply execute '$0 download && $0 extract' and than repeat '$0 register' many times as necessary";; esac exit 0 

In fact, the elementary script was written during the time that Ubuntu was installed on VirtualBox.

It's easy to use ... To begin with, we let it go:

 ./dropcheat.sh download && ./dropcheat.sh extract 

That is, the dropbox is downloaded and unpacked into the user's home directory. And then repeat until blue in the face. As you can guess, sudo is necessary to change the MAC address.

 sudo ./dropcheat.sh register 

What is happening here then ... Well, firstly, at each iteration, the old dropbox configuration is being streamed. then the mac address is updated, Firefox is launched with the referral link stored in the $ REFLINK variable (by the way, do not forget to change it, although I will not be offended =))). In the browser window that opens, we enter any nonsense, the main thing to remember is the email and password, because we need them in the next step, which will start dropbox, ask “Cho, how?”, In response, say “I have an account”, enter login / password. Further, exit, and again we return to the launch of the script ...

Try on:


Why does the machine not parse the registration page and not substitute random values, which are then somehow transferred to the dropbox's welcome window? It would take too much time and those ten iterations that will have to spend is not worth it ...

UPD: Oh yes, the script itself is here: dl.dropbox.com/u/9408151/dropcheat.sh if suddenly someone does not want to just copy it ...

UPD2: As I can see here there is a slight misunderstanding of how DropBox works, as well as the motives that prompted me to do this little prank. For some reason, they are accused of stealing ...

In order. To begin with, my dear ones, it’s worth remembering that no one in the dropbox (and any other cloud storage) for each account will reserve all necessary gigabytes in advance, otherwise they would have run out of hard drives very quickly. Just as needed, you allocate a certain amount of space. If you logically have 10 GB and only 2 are physically occupied, then 2 GB of data will be stored on the servers.

The second. The script is written in a few free minutes. during which ubunt was staged, I don’t see any theft here, just sports interest. For example, see which of the readers can go even further . Besides. if the security system of the service is so badly thought out, then not to take advantage of such a hole, even for fun, is disgusting. When is it such an easy, fun and unobtrusive hack SUDDENLY turned into something criminal? Especially since I myself ran the script only two times for testing purposes.

Well, just in case, I will add - all responsibility for the action of the script falls on those who use it, since here it is presented as an introductory material, as an example of circumventing the security system of one of the popular services.