.jpg)
Some days ago, I posted notification about the changes Rapidshare had implemented in its point system. Those who are unaware of it might read it here.
On the morning of 16th July, I got information from my friend Siddharth that he had phished some Rapidshare accounts. He gave me one account to try with. I just logged on to Rapidshare.com using premium account and saw the site from the premium accounts' eyes for the first time. I checked if there were any points left in the account so that I can extend it. There were already 8000 points in it. The account was about to expire, so I decided to see if I can find any exploit in the premium service of Rapidshare.
I saw that they give you points if a premium user download your files which is greater than 3 mb.
Now the funny point is they didn't mentioned which premium user. That premium user can be me itself downloading my own files and then extending my account when I reach 10K mark. But for that I have to download a 3mb file 255 times a day !!!!
Now that would really create a mess of my internet connection.
Then I decided to trick Rapidshare server. I checked other features of Rapidshare account and came across a wonderful (and seriously exploitable) service called "Remote Upload".
Why not use Rapidshare's this feature to download my own files? Rapidshare does not log from where the file is being downloaded. I just checked to see if this was really working.
I copied a url from my own account, put my premium account user id and password in the form :
http://userid:password@rapidshare.com/files/xxxxxxxx
I feeded into the remote upload box the above url. Just as I pushed "Add", an alert told me that I cannot add a Rapidshare url.
So Rapidshare didn't allow remote uploads if the file belongs to their own server. But I was not at ease at any moment. I just fired http://tinyurl.com and wrapped my rapidshare url using the tinyurl service. I again feeded the url to Rapidshare remote upload service and bingo!!!!!!!. It worked this time. Rapidshare downloading my own files and also giving me points for. Yeah !!!!
So you can see that Rapidshare programmers are dumb enough that they made such silly mistakes that even a n00b can exploit.
You must try this tweak before Rapidshare catches it.!!!!!!!
Update : Rapidshare has banned all such methods of Remote Upload.
On the morning of 16th July, I got information from my friend Siddharth that he had phished some Rapidshare accounts. He gave me one account to try with. I just logged on to Rapidshare.com using premium account and saw the site from the premium accounts' eyes for the first time. I checked if there were any points left in the account so that I can extend it. There were already 8000 points in it. The account was about to expire, so I decided to see if I can find any exploit in the premium service of Rapidshare.
I saw that they give you points if a premium user download your files which is greater than 3 mb.
Subject to the condition is that the file is at least 3 Megabyte in size and the downloader has generated not more than 3 RapidPoints in the last hours. Premium users can generate for you up to 255 points per day.
Now the funny point is they didn't mentioned which premium user. That premium user can be me itself downloading my own files and then extending my account when I reach 10K mark. But for that I have to download a 3mb file 255 times a day !!!!
Now that would really create a mess of my internet connection.
Then I decided to trick Rapidshare server. I checked other features of Rapidshare account and came across a wonderful (and seriously exploitable) service called "Remote Upload".
Why not use Rapidshare's this feature to download my own files? Rapidshare does not log from where the file is being downloaded. I just checked to see if this was really working.
I copied a url from my own account, put my premium account user id and password in the form :
http://userid:password@rapidshare.com/files/xxxxxxxx
I feeded into the remote upload box the above url. Just as I pushed "Add", an alert told me that I cannot add a Rapidshare url.
Please do not add RapidShare URLs. Remote Upload cannot be used for RapidShare links.
So Rapidshare didn't allow remote uploads if the file belongs to their own server. But I was not at ease at any moment. I just fired http://tinyurl.com and wrapped my rapidshare url using the tinyurl service. I again feeded the url to Rapidshare remote upload service and bingo!!!!!!!. It worked this time. Rapidshare downloading my own files and also giving me points for. Yeah !!!!
So you can see that Rapidshare programmers are dumb enough that they made such silly mistakes that even a n00b can exploit.
You must try this tweak before Rapidshare catches it.!!!!!!!
Update : Rapidshare has banned all such methods of Remote Upload.
.jpg)
