debug error code "200 / user ip banned"

Discussion in 'Cracking Discussions & Help Forum' started by iShadow.Angels, Nov 29, 2014.

  1. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    ----------------------------------------------------------------------------------
    <-----Bot Status: After Fingerprint -> Error - Got 200 and no source failure keys found with wrong combo - Original Source Length: 136570 -> User IP banned----->
    ---------------------------------------------------------------------------------->

    hi i am cracking a site, i have created config for it. and when i start cracking it with a combo of one combo which is a hit, it doesn't show a hit but it put my combo in check list.
    furthermore when i debug it with right or wrong combo the debug screen gives me same error.
    the strange thing is if user ip is banned then it should not send my combo to check list, but this behavior tells me that my ip is not banned, even i can sign into that site from my browser. then when i study the error code 200, it says everything is as expected. and debug don't detect any FKeys.
    I'm confused :blink:

    can anyone guide me what does this error mean?

    thanks in advance
     
  2. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    it's doesn't mean IP is banned ! :P
    it's due to your FK..
    change your Fk & Which site you are trying
     
    iShadow.Angels likes this.
  3. MR.ViPeR

    MR.ViPeR Well-Known Member Retired Staff

    Messages:
    3,758
    Likes:
    2,195
    Ratio:
    2.87
    Disable After Fingerprint From Fake Settings... Maybe Will Be Fix...
    And See The Source And Search The failure Key From Your Browser... And Use That
     
    iShadow.Angels likes this.
  4. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    wow, you're so fast, thank you so much for replying.
    well, i think my FK is right lol, i put failure key as i got from using bad user pass in login screen.
    it's just a random site to test my skills lol,

    SITE:
    http://www.shophive.com/customer/account/login/

    how can i extract my config from MBA to show you?
     
  5. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    did it. now error says

    ----------------------------------------------------------------------------------
    <-----Bot Status: No keys found upon 200 - OK -> Check answer - Source Length: 136570----->
    ---------------------------------------------------------------------------------->

    now where should i expect my bad config? it should detect my fk now
     
  6. MR.ViPeR

    MR.ViPeR Well-Known Member Retired Staff

    Messages:
    3,758
    Likes:
    2,195
    Ratio:
    2.87
    Put This In The Cookie :

    __cfduid=d4ff875d7b22c2a9959a89fae0627eccb1417249404; frontend=f53665e802c1bae5c08e797c394f391a
    And Enable "Refresh Cookie"

    And Use This For Failure Key:

    <ul><li><span>Invalid login or password.</span></li></ul>
    If Not Fixed Then Maybe You Need TO Parse "form_key" Value !
     
    Sam_03 and iShadow.Angels like this.
  7. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    you selected wrong site for startup !
    have you configured correct post data ? :huh:
     
    iShadow.Angels likes this.
  8. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    no, it doesn't fix it, the error is same. and when i start cracking it put my right combo in check list with same error showing there.
    can you guide me what you mean to Parse "form_key" Value ?
     
  9. MR.ViPeR

    MR.ViPeR Well-Known Member Retired Staff

    Messages:
    3,758
    Likes:
    2,195
    Ratio:
    2.87
    iShadow.Angels likes this.
  10. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    yes i checked it in httpfox and compared with analyzed one. there is a little difference lol,

    in analyzed post data, the user & pass boxes data is like this ------> login%5Busername%5D
    and in httpfox, it is like this -------------------------------------------------> login[username]

    does it make a difference while processing it btw?
    but i tried both. is it what you are asking? :p
     
  11. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    you need to add postdata manually :) sentry 's analyze doesn't work all the time ! :P
     
    iShadow.Angels likes this.
  12. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    http://prntscr.com/5baqs8

    hey which post data are you talking about? the screenshot i took, you mean to manually put in number 1 or 2 ?
    if you're talkin about number 1, then yes i have tried manually putting from httpfox.
     
  13. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    i am taking about 1 & you need to pars form_key value from loginpage use variable because it's value change every time
     
    iShadow.Angels likes this.
  14. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    yes i mistakenly wrote number 2 in my previous comment. i put number 1 manually,
    and yes now i understand that form_key keeps changing everytime. so i need the help of variables. atleast now i see an example of where variables will be used :)
    thanks a lot. and if you have any good link for learn variables fully then please do share. and i'll report back after i start using them hehe :)

    correct me if im wrong. because the form_key is keep changing. that means that MBA GET data correctly from site, but when it POST it back, it gives wrong value of form_key (as i have set it to static). thats why the site replies with bad request sent. but MBA does not recognize it and it shows error 200 means everything is as expected. am i right?
     
  15. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    yes ! you are right now
    well try this video ! https://www.youtube.com/watch?v=Y7QR7SefB5s&hd=1
    may be it's content tut for parsing data ! ;)
     
    iShadow.Angels likes this.
  16. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    & Here is shopehive config for you
    Hidden Content:
    You must 'reply' before you can see the hidden content.
    ! see it & i used Intermediate stage for parsing form key value & you can use varibles too !
    i haven't added capture for it :D
    goodluck ! ;)
     
    iShadow.Angels likes this.
  17. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    that site did not have any importance, just wanted to practice. but your help is priceless. it will help me understand different variations of configs for same site.
    can you explain a little why did you choose intermediate stage to do that and not variables? and if i use variable should i use login stage or intermediate?
    and if you can explain about these stages a little bit.
    thanks :) :D
     
  18. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    There is not any specific reason to use IA [ Intermediate action stage] :lol: just to show that you can parse value in IA too ! & if you use variables than delete all the IA Setting and Setup variables in Login stage like this & here is debugger result :D
     
    iShadow.Angels likes this.
  19. iShadow.Angels

    iShadow.Angels New Member

    Messages:
    108
    Likes:
    6
    Ratio:
    0
    hmmm?? like this? here is debugger result? where is it? :o
    haha do you mind if you make me the same config with variables? it will explain a lot of things for me.
    and thanks for your attention.
     
  20. Sam_03

    Sam_03 Member

    Messages:
    443
    Likes:
    250
    Ratio:
    0.04
    iShadow.Angels likes this.

Share This Page