PDA

View Full Version : binload with third-party software?



bobbintb
07-01-2011, 12:15 AM
anyone know how to setup binload with thirdparty software? i know disme does but he is very reluctant to give up his secrets. the binload software sucks and ive had to redownload many things because when it finishes and extracts its incomplete. it doesnt give you enough control. i cant even find any info on what the server address is.

Cabalo
07-01-2011, 01:07 AM
Disme was just teasing you.
You will need to use Wireshark to intercept the communication between your client and the server.
There you will get the server's IP address and the username/password you were assigned.

bobbintb
07-01-2011, 01:59 AM
well someone in another thread had the address and i think its right because when i use the address 85.12.7.190 it responds with 502 error for reader4.binload.com. i use the same user/pass but it doesnt work. dont know why.

Cabalo
07-01-2011, 02:04 AM
It doesn't work because the user/pass you created are just for an account at binload's site. Its site then automatically generates a different user/pass for their newsgroups server, which is the one you will need wireshark to sniff.

bobbintb
07-01-2011, 03:15 AM
makes sense

sweet. ive used wireshark before. didnt think of that. and now i got it working. i also didnt consider the username and password wasnt actually the one being used.

Hypatia
08-14-2011, 08:43 AM
hmm how do i do it via wireshark? =)
could someone post a short guide for getting log\pass from binload 7


PS nevermind i found login\pass and server address =))

formerglory
08-29-2011, 05:55 PM
Been trying to use wireshark to intercept the user/pass for Binload, but have been unsuccessful so far. Can anyone provide any pointers/tips/how-to? I'm trying to do it myself, just need a little help.

bergy10
08-29-2011, 09:34 PM
Me too, can't seem to find anything related to NNTP.

zot
08-31-2011, 04:54 AM
There are many other packet sniffers besides Wireshark.

Tamosoft Commview is easy to use, and unlike Wireshark, also works on dialup.

Stabber
08-31-2011, 10:55 PM
it's pretty simple to make it work with wireshark , just open it , downlaod something with binload client and check the nntp filter to find the username password and server address

formerglory
09-07-2011, 08:57 PM
With Wireshark, should SSL be turned off in Binload? All I get is jibberish when SSL is on. I see the nntp parts, just can't find the user/pass.

zot
09-09-2011, 07:18 AM
With Wireshark, should SSL be turned off in Binload? All I get is jibberish when SSL is on.

I hope you understand that SSL is a type of encryption, which basically ... turns everything into jibberish. :P

formerglory
09-10-2011, 04:17 AM
I hope you understand that SSL is a type of encryption, which basically ... turns everything into jibberish. :P
Indeed, I do. I had a brain fart, and figured everything out after all :P. Problem solved!

Jammie2k7
09-16-2011, 11:37 AM
Cant get the user/pass from wireshark anyone help?

anon
09-16-2011, 01:31 PM
Run the Binload client, make sure SSL is disabled, then start a download and stop it a few seconds afterwards while the packet sniffer of your choice (mine was SmartSniff) captures all traffic on port 119.

I was able to do it in two minutes, and have been using the account on SABnzbd for a few days without any problems.

enerdude
09-16-2011, 01:39 PM
Cant get the user/pass from wireshark anyone help?

I used a network protocol analyzer from colasoft and it was pretty straightforward for me. You can download it @ http://www.colasoft.com/download/products/capsa_free.php

Below is roughly the steps I followed

1. Open the program and click the "capture" tab ; make sure the network adapter that internet traffic flow through is selected at top left of screen.
2. Under analysis profile just select Full analysis
3. Press the "Play" button at bottom right of screen to start capture packets
4. Start Binload and start downloading something
5. In node explorer on left hand side of screen you will see "Full analysis". Under Full analysis expand the view as follow: protocol explorer --> ethernet --> IP --> TCP
6. Under TCP you will find the NNTP protocol. Highlight NNTP
7. In middle window on screen you will see tabs across the screen (summary, diagnosis....upto report). Click on "packet"
8. You now have a view of all the newsgroup packets. To find login details, start search by pressing ctrl-F. It will pop-up a window called "Find in packets"
9. To find username, search for authinfo user In the bottom window it should find the text and the username should start with "bl". Copy the whole username upto in front of the dots (..)
10. To find password, search for authinfo pass In the bottom window copy everything after ""authinfo pass" [excluding space] upto in front of the dots (..)

Enjoy....

P.S. News sever ip address is news1.eu.binload.com or 85.12.7.190 on port 119 or 80 [80 is useful if port 119 is blocked / throttled by your ISP for some reason)
SSL you can use port 443 or 563

Edit: I have analyzed the binload program with a "man in the middle" attack using fiddler and have analyzed the traffic it sends after logging in.
It does a https POST to https://search.binload.com/login.php with following data:

<login><username>username [email] goes here</username><password>passoword SHA1 encrypted goes here</password><appversion>v1.0.4</appversion></login>

The server respond then with something like this:

<user>
<valid>true</valid>
<validUntil>2012-01-01 00:00:00</validUntil>
<url>news1.eu.binload.com</url>
<username>newsserver username goes here [same as can be found by protocol sniffer]</username>
<password>newsserver password goes here [same as can be found by protocol sniffer]</password>
<searchURL>https://search.binload.com/searchnzb.php</searchURL>
<downloadURL>https://search.binload.com/downloadnzb.php</downloadURL>
<nfoURL>https://search.binload.com/getnfo.php</nfoURL>
<browseURL>https://browse.binload.com/index.php</browseURL>
<helpURL>https://help.binload.com/index.php</helpURL>
<communityURL>http://forum.binload.com/</communityURL>
</user>

If you guys want I can write a little program that will let you login with your email / pass and will then show your news server login details without you having to sniff it ;)

Jammie2k7
09-16-2011, 03:35 PM
Done what you said but everytime i search for authinfo user it says cannot find!

enerdude
09-16-2011, 04:15 PM
Done what you said but everytime i search for authinfo user it says cannot find!

You must be missing something...

Are you interested in a program that will get the info for you automatically? Give me a day and I will code one ;)

zot
09-16-2011, 07:11 PM
I was able to do it in two minutes, and have been using the account on SABnzbd for a few days without any problems.

Judging by the blitz of questions, it would seem that these "two minute" packet analyzers give a lot of people headaches trying to figure them out. They are, after all, designed more for technical people rather than the "point-and-click" unwashed masses. :)

In the days when people were trying to packet-capture the logins to free dialup ISPs like Juno and Netzero (so they would not be forced to run the buggy software all the time) there were dedicated one-click ("idiot-proof") applications like Rasspy and DialGuard that would intercept these logins -- without having to a run full-on network analyzer, which are far more complicated and feature-packed than the average person would ever need or want (or even know how to interpret).



If you guys want I can write a little program that will let you login with your email / pass and will then show your news server login details without you having to sniff it ;)

enerdude - Do you think it would it require much work to put together a 'keygen-like' app that would extract the login details out of the packet stream? Such a tool would certainly be appreciated by many (though if successful, could spell the early demise of the free Binload era -- just as Rasspy did for Netzero).

anon
09-16-2011, 08:02 PM
Such a tool would certainly be appreciated by many (though if successful, could spell the early demise of the free Binload era -- just as Rasspy did for Netzero).

My thoughts also. If anyone can easily extract the login data that'd be cool, but it may cause Binload to close or cease offering free services.

enerdude
09-16-2011, 08:49 PM
enerdude - Do you think it would it require much work to put together a 'keygen-like' app that would extract the login details out of the packet stream? Such a tool would certainly be appreciated by many (though if successful, could spell the early demise of the free Binload era -- just as Rasspy did for Netzero).

I'm not a coder by I know how to use software called winautomation, so I made a little program to do the job. It captures the details straight from binload's server (not from the packet stream), so you dont even need to install and run the binload software. All you need is the initial username (email) and password you selected when you signed up.

85851

Installation and usage:


The program require at least .NET framework 2.0
Download and extract the rar file into a folder. The rar contains two .exe files
Run the main program (Binload info tool by enerdude.exe)

Virusscan for those of you that dont trust me ;)


http://www.virustotal.com/file-scan/report.html?id=a64a051fb0bf66d97359924fdbd182b58945b074772bd3871268cc2e348eff23-1316205195

Download

http://www.mediafire.com/?9b85acrsasa11r5


Post your experience in this thread and enjoy! ;)

enerdude
09-16-2011, 08:53 PM
Such a tool would certainly be appreciated by many (though if successful, could spell the early demise of the free Binload era -- just as Rasspy did for Netzero).

My thoughts also. If anyone can easily extract the login data that'd be cool, but it may cause Binload to close or cease offering free services.

Well I created a program anyway. Use it if you please (I have already replied with a download link but the forum software told me my post must first be approved, so I guess it will be here soon)

Edit: I only saw afterwards the virustotal report has 1 of 44 positive results from a AV program called Rising but it is obviously a false positive

zot
09-16-2011, 10:07 PM
thanks enerdude, much appreciated.

anon
09-16-2011, 10:59 PM
Ditto. For good or bad it may help a chap or two.

OldIronTits
09-16-2011, 11:45 PM
Yikes!

enerdude, your effort is very generous. Personally, I would request that your program be removed. The fewer the people taking advantage of Binload's offer, the better. Keep out the mouse-jockeys!

JustDOSE
09-18-2011, 05:39 PM
Yikes! enerdude, your effort is very generous. Personally, I would request that your program be removed. The fewer the people taking advantage of Binload's offer, the better. Keep out the mouse-jockeys! lmao so only you should know about it? hahaha get real its a public beta that ends on new year so have fun keeping a secret for the new 2 months, lol. your the reason people dont share good free servers, greedy little leeches, i hate shit like that. but you can look at all my free servers,leechers get jealous pl0x http://i1180.photobucket.com/albums/x404/xoxo000069/harhar.jpg http://i1180.photobucket.com/albums/x404/xoxo000069/harhar.jpg

anon
09-19-2011, 01:05 AM
mao so only you should know about it? hahaha get real its a public beta that ends on new year so have fun keeping a secret for the new 2 months, lol.

Is that official? I guess I'll have to go back to XS Usenet next year, then. :unsure:

Cabalo
09-19-2011, 02:25 AM
Nah, just4today is excellent for 0-day stuff. 10 days retention is more than enough in most cases for the average user.

Disme
09-19-2011, 07:57 AM
your the reason people dont share good free servers, greedy little leeches, i hate shit like that. but you can look at all my free servers,leechers get

Who do you think will use this info? People that will upload content to Usenet??? Think again, it's exactly the leechers you hate that will use this info and will exploit this 'trick' so it will stop working in no time. If someone isn't even capable to perform such a simple action with Wireshark or any other packet-sniffer, than they should refrain from using freeservers and just get a payserver.

And that's exactly the reason most 'free' alternatives are shared with a select bunch of people that have a clue what they are doing.

Lol @ your screenshot though, another FAILED attempt to impress the not so smart members of this board :rolleye:

anon
09-19-2011, 11:32 AM
Nah, just4today is excellent for 0-day stuff. 10 days retention is more than enough in most cases for the average user.

New login data every day. And I'm lazy like that :P

OldIronTits
09-20-2011, 07:12 PM
lmao so only you should know about it? hahaha get real its a public beta that ends on new year so have fun keeping a secret for the new 2 months, lol. your the reason people dont share good free servers, greedy little leeches, i hate shit like that. but you can look at all my free servers,leechers get jealous pl0x

1. Let's see a pic of your uploading client? You even have one?

2. I have more free servers than you.

3. "your" the reason.

86188

KFlint
09-28-2011, 03:25 AM
I didn't read the whole thread but was wondering if there was a periodic password change.

Anybody used the program from enerdude?

enerdude
09-28-2011, 03:53 AM
I didn't read the whole thread but was wondering if there was a periodic password change.

Anybody used the program from enerdude?

Hell yeah, I have had 370 downloads on mediafire and not even 1 feedback. Thought I did the people a favour but not even 1 thumbs up....


edit: found this on google: http://en.cship.org/wiki/Free_Usenet_Newsservers_with_alt.binaries

it links to this thread and talks about a "free .NET Application from the Filesharingtalk.com-Forum". Lot of people might have found it via google....

Hypatia
09-28-2011, 07:13 AM
it is closed.... both bintube and"free lifetime" 1 mbit access.. they even killed my account lol

enerdude
09-28-2011, 07:21 AM
it is closed.... both bintube and"free lifetime" 1 mbit access.. they even killed my account lol

What you mean by "both" is closed?
I just tested binload and xsusenet lifetime 1mbit acess....both is still working for me.

Use my binload info tool if you need your access details for binload....easier than using wireshark or other tools ;)

Hypatia
09-28-2011, 07:33 AM
the registration is closed =)

and it says that my account is locked =)


Due to overwhelming demand for our free public beta we're currently not taking any new signups. Our apologies for the inconvenience caused.


Signups have been temporarily suspended due to high demand, we apologize for the inconvenience.

enerdude
09-28-2011, 07:38 AM
the registration is closed =)

and it says that my account is locked =)




Signups have been temporarily suspended due to high demand, we apologize for the inconvenience.

LOL luckily my account still works. Did you download quite a lot that they locked your account or has one of your newsreader programs maybe got the connection still open so then it wont allow you to open another connection?

Hypatia
09-28-2011, 09:00 AM
nope i almost didnt use it at all=)
but i gave them some rubbish registration info like "name- 78ggugi" city- &*(gghu lol

anon
09-28-2011, 03:51 PM
Binload killed my account too. SABnzbd says it's not accepting connections from my node. I'd check if they've just changed the NNTP username and password, but I trashed my Binload login data after having some fun with SmartSniff, so I'm screwed. :lol:

Oh, and XS Usenet is still working for me.

enerdude
09-28-2011, 04:21 PM
Binload killed my account too. SABnzbd says it's not accepting connections from my node. I'd check if they've just changed the NNTP username and password, but I trashed my Binload login data after having some fun with SmartSniff, so I'm screwed. :lol:

Oh, and XS Usenet is still working for me.

Chances are good they have changed the NNTP user/pass. If you can remember the email address / pass you signed up with, you can use my program to retrieve your details ;)

anon
09-28-2011, 04:26 PM
Yes, I think I will try that. I remember which disposable e-mail service I used, and the password was probably something like 123456 or asdf1234 :P

Stabber
09-28-2011, 04:53 PM
It works just fine here with 3rd party client :)

anon
09-29-2011, 12:27 AM
Well, turns out I had the e-mail and pass on a text file, and so I was able to regain access :D

Indeed they had changed the NNTP password, which is separate from the login you do in Binload's client, so those who use that didn't notice anything. And doing that every day would be enough to heavily deter these accounts from being used on third-party clients, as zot commented some time ago.

Disme
09-29-2011, 07:31 AM
Had the same issue, fixed in 5 seconds, just run Binload sandboxed, capture in Wireshark and there's the new PW.

Anon, you are indeed correct ... if they change this pw every day it will be as much as a hassle as just4today is right now.
But since it's entirely free you won't hear me complaining ;)

enerdude
09-29-2011, 08:24 AM
Had the same issue, fixed in 5 seconds, just run Binload sandboxed, capture in Wireshark and there's the new PW.

Anon, you are indeed correct ... if they change this pw every day it will be as much as a hassle as just4today is right now.
But since it's entirely free you won't hear me complaining ;)

Using my program is even easier to get the password. You can do it in 2 seconds ;)

Cabalo
09-29-2011, 01:51 PM
Though I appreciate your efforts to create this tool, you are killing the binload trick with it.

anon
09-29-2011, 04:01 PM
Though I appreciate your efforts to create this tool, you are killing the binload trick with it.

Sadly, that's true.

Disme, what did you use to run Binload sandboxed? I have Sandboxie, but it kept on giving a Java error every time I tried to open the client. I had to install and run it "for real"...

Disme
09-29-2011, 05:42 PM
Disme, what did you use to run Binload sandboxed? I have Sandboxie, but it kept on giving a Java error every time I tried to open the client. I had to install and run it "for real"...
I also use Sandboxie, but it didn't give me any error at all. I'm on Win7 64b and never had problems with it.

anon
09-29-2011, 05:45 PM
I'm using 3.54, maybe it's time to update.

KFlint
09-29-2011, 10:00 PM
I didn't run it sandboxed, should I expect my computer to crash and burn? :fear:

anon
09-29-2011, 10:14 PM
I didn't run it sandboxed, should I expect my computer to crash and burn? :fear:

If you don't use Sandboxie for programs you don't plan to keep on using and and private tabs for most sites you visit, we can't be friends. :noes:

enerdude
09-29-2011, 10:42 PM
Though I appreciate your efforts to create this tool, you are killing the binload trick with it.

Binload trick?

Lol. A lot of people are already using some kind of protocol analyzer to get the pw. I have even seen a full tutorial on using wireshark to do it on another forum.
Seeing that new registrations are now closed, all my tool is doing is saving you some time.

If people really want to get to it they would use any method available.


Disme, what did you use to run Binload sandboxed? I have Sandboxie, but it kept on giving a Java error every time I tried to open the client. I had to install and run it "for real"...

If you use my program you also don't have to install their crappy software [or even wireshark for that matter] first to get the password.

KFlint
09-30-2011, 01:24 AM
I didn't run it sandboxed, should I expect my computer to crash and burn? :fear:

If you don't use Sandboxie for programs you don't plan to keep on using and and private tabs for most sites you visit, we can't be friends. :noes:

I usually have friends whose PC are total dumps, so I take no offense. Anyway, I can still play Angry Birds just fine with Binload installed, which must mean my laptop is still fully functional, right? :unsure:

anon
09-30-2011, 01:33 AM
I usually have friends whose PC are total dumps, so I take no offense.

I became pretty obsessive about file "contamination" and system optimization after I gained experience about such things and realized how my computer was a junkyard beforehand. That's why I use things like Sandboxie and lightweight Windows editions, and extensively tweak all the software I use.

About Angry Birds, can you believe I've never played it? I've heard about it and read about the Chrome port here, but cannot bring myself to install the Flash Player (portable Chrome's already taken care of) and finally check it out! :P

Stabber
11-03-2011, 04:16 PM
Does binload stopped working ? It doesn't work for me for some days now

zot
11-03-2011, 05:24 PM
Does binload stopped working ? It doesn't work for me for some days now
What exactly do you mean by "it"? (BTW, "it" works for me :D)

Since the title of this thread is "binload with third-party software" can we assume that is what your problem somehow involves?

Have you read all the info in the rest of the thread, understood what others have reported, and tried those suggestions?

anon
11-03-2011, 06:18 PM
SABnzbd plus sniffed login data still equals win here. Maybe they changed your NTTP password? They did that to me once.

Stabber
11-03-2011, 07:00 PM
yes that's probably the thing , the must have changed my password , i will look into it

zot
11-03-2011, 10:14 PM
the must have changed my password
Indeed, and the rest of us as well ... two months ago.

Please read the earlier posts of this discussion thread. I think you'll find everything you need to know ;)

edogg
02-13-2012, 09:16 AM
I thank the original op for the program to find my password but i am still getting 502 cannot connect in alt binz so i am guessing although my account is supposed to be until 2013 binload has closed its servers

enerdude
02-13-2012, 10:21 AM
I thank the original op for the program to find my password but i am still getting 502 cannot connect in alt binz so i am guessing although my account is supposed to be until 2013 binload has closed its servers

Still works for me.

Are you using news1.eu.binload.com (port 119) as your server?

edogg
02-13-2012, 10:45 AM
hi yes i just tried it today and i am getting 502 reader1.binload.com connection denied to your node newsadm@binload.

silly me I substituted l for 1 in my user name it is connected now

Stabber
02-13-2012, 12:45 PM
it works fine here

anon
02-13-2012, 05:42 PM
silly me I substituted l for 1 in my user name it is connected now

Such mistakes can happen thanks to certain fonts. I remember the word "Ill" can look like three bars...

Anyway, I downloaded an NZB using Binload yesterday, so it's indeed operative. I'm glad they renewed the service for another year.

Cabalo
02-13-2012, 08:36 PM
One quick question, now that I recovered my account: what's the max simultaneous connections allowed?

Stabber
02-13-2012, 08:54 PM
One quick question, now that I recovered my account: what's the max simultaneous connections allowed?

20 connections

justlooking
07-17-2012, 03:31 PM
I just wanted to say thanks to enerdude, so, thanks to enerdude.

Jammie2k7
07-17-2012, 04:42 PM
Mine is not working anymore! keep getting 502 saying to many connections! i tried it with 1 and still same thing it connects but nothing downloads

Anyone else getting this?

anon
07-18-2012, 12:50 AM
Mine is not working anymore! keep getting 502 saying to many connections! i tried it with 1 and still same thing it connects but nothing downloads

Anyone else getting this?

I use two connections for Binload in SABnzbd, and it's working fine as of this post.

enerdude
07-18-2012, 03:37 AM
I just wanted to say thanks to enerdude, so, thanks to enerdude.

Its my pleasure ;) Good to know people are still using my program....

Jammie2k7
07-18-2012, 02:14 PM
Works for 5mins then comes to a stop! could it be the alt.binz client? I`m 88% through a 25gb file and really want to get it done!

edit: I put in another file to download and it started straight away then stopped after 5mins!

Stabber
07-20-2012, 11:48 PM
that's weird , it works just fine here with bintube

Jammie2k7
07-24-2012, 01:04 PM
Seems to be working again managed to download a file last nite :)