Best Blackhat Forum

Full Version: [TUT] Easy way to SMS verify accounts
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
Hey guys.

I was going to write this up properly but to be honest, the sun is out and the coffee is tasting good so I want to read the paper more than type Didn’t see this in the forum anywhere, but apologies if I missed it.

I have been making Google, Facebook type accounts and have been verifying them using Tropo.com

Sign up as a developer and you can test your applications free – thrown into this you get access to a free pool of US numbers that can receive SMS messages (other countries available but Tropo do not guarantee their SMS use).

You can assign numbers, use them to verify and then unassign and grab a new number for the next one.

If you use a lot, they will assume that your application is in production and may charge you $3 per month per number – possibly still a good price depending on your use.

I have been running the developer plan for a while without problems and they do work.

Once you hit the ‘send SMS’ button in Gmail etc, you can either:

1. Watch the debug panel at Tropo and you will see the SMS message come in with your codes. There is a lot of other info in there so its not the easiest to read or;

2. Send all the info to a script on your web server so you can pull out the right info easily (their API is spot on). This will keep a record of the text messages coming your way. Method 1 will not store any old data.

The script I use to write a log file is attached Here

which just saves the text message content and the network (SMS or VOICE – tropo does both) The above just pulls the message content out to make it easier to find your verification code. Apologies about the way this is written, its an easy thing to do and Tropo seem a good company to use. If you need any help, feel free to shout – saying that, I think most people will see the value in a service like this as well as how to put something together code-wise to try and automate it a little more Have fun!
Does it work??
(12-08-2012 02:15 AM)hlnothingsiu Wrote: [ -> ]Does it work??
does it bite to try?
sounds good for multiple youtube accounts verification
Hi I knew about tropo already, I read somewhere that tropo has started blocking incoming texts from certain sms verification services. I tried with facebook and your code doesn't seem to produce any logs, nothing in the debugger either. Any ideas?
Can anyone else verify that this works?
Look like I do not has access to the script! Can you upload to any paste/gist/file website, I would like to test it!
dude the php itself cant be downloaded from server and single client please zip your code
when i try to download it give me this :/
You do not have permission to access this page. This could be because of one of the following reasons:
I cant download neither this script, could anyone paste here as text or in pastebin? THANKS!
Reference URL's