Printable View
anyone know how to setup binload with thirdparty software? i know disme does but he is very reluctant to give up his secrets. the binload software sucks and ive had to redownload many things because when it finishes and extracts its incomplete. it doesnt give you enough control. i cant even find any info on what the server address is.
Disme was just teasing you.
You will need to use Wireshark to intercept the communication between your client and the server.
There you will get the server's IP address and the username/password you were assigned.
well someone in another thread had the address and i think its right because when i use the address 85.12.7.190 it responds with 502 error for reader4.binload.com. i use the same user/pass but it doesnt work. dont know why.
It doesn't work because the user/pass you created are just for an account at binload's site. Its site then automatically generates a different user/pass for their newsgroups server, which is the one you will need wireshark to sniff.
makes sense
sweet. ive used wireshark before. didnt think of that. and now i got it working. i also didnt consider the username and password wasnt actually the one being used.
hmm how do i do it via wireshark? =)
could someone post a short guide for getting log\pass from binload 7
PS nevermind i found login\pass and server address =))
Been trying to use wireshark to intercept the user/pass for Binload, but have been unsuccessful so far. Can anyone provide any pointers/tips/how-to? I'm trying to do it myself, just need a little help.
Me too, can't seem to find anything related to NNTP.
There are many other packet sniffers besides Wireshark.
Tamosoft Commview is easy to use, and unlike Wireshark, also works on dialup.
it's pretty simple to make it work with wireshark , just open it , downlaod something with binload client and check the nntp filter to find the username password and server address
With Wireshark, should SSL be turned off in Binload? All I get is jibberish when SSL is on. I see the nntp parts, just can't find the user/pass.
I hope you understand that SSL is a type of encryption, which basically ... turns everything into jibberish. :PQuote:
Originally Posted by formerglory
Indeed, I do. I had a brain fart, and figured everything out after all :P. Problem solved!Quote:
Originally Posted by zot
Cant get the user/pass from wireshark anyone help?
Run the Binload client, make sure SSL is disabled, then start a download and stop it a few seconds afterwards while the packet sniffer of your choice (mine was SmartSniff) captures all traffic on port 119.
I was able to do it in two minutes, and have been using the account on SABnzbd for a few days without any problems.
I used a network protocol analyzer from colasoft and it was pretty straightforward for me. You can download it @ http://www.colasoft.com/download/pro...capsa_free.phpQuote:
Originally Posted by Jammie2k7
Below is roughly the steps I followed
1. Open the program and click the "capture" tab ; make sure the network adapter that internet traffic flow through is selected at top left of screen.
2. Under analysis profile just select Full analysis
3. Press the "Play" button at bottom right of screen to start capture packets
4. Start Binload and start downloading something
5. In node explorer on left hand side of screen you will see "Full analysis". Under Full analysis expand the view as follow: protocol explorer --> ethernet --> IP --> TCP
6. Under TCP you will find the NNTP protocol. Highlight NNTP
7. In middle window on screen you will see tabs across the screen (summary, diagnosis....upto report). Click on "packet"
8. You now have a view of all the newsgroup packets. To find login details, start search by pressing ctrl-F. It will pop-up a window called "Find in packets"
9. To find username, search for authinfo user In the bottom window it should find the text and the username should start with "bl". Copy the whole username upto in front of the dots (..)
10. To find password, search for authinfo pass In the bottom window copy everything after ""authinfo pass" [excluding space] upto in front of the dots (..)
Enjoy....
P.S. News sever ip address is news1.eu.binload.com or 85.12.7.190 on port 119 or 80 [80 is useful if port 119 is blocked / throttled by your ISP for some reason)
SSL you can use port 443 or 563
Edit: I have analyzed the binload program with a "man in the middle" attack using fiddler and have analyzed the traffic it sends after logging in.
It does a https POST to https://search.binload.com/login.php with following data:
<login><username>username [email] goes here</username><password>passoword SHA1 encrypted goes here</password><appversion>v1.0.4</appversion></login>
The server respond then with something like this:
<user>
<valid>true</valid>
<validUntil>2012-01-01 00:00:00</validUntil>
<url>news1.eu.binload.com</url>
<username>newsserver username goes here [same as can be found by protocol sniffer]</username>
<password>newsserver password goes here [same as can be found by protocol sniffer]</password>
<searchURL>https://search.binload.com/searchnzb.php</searchURL>
<downloadURL>https://search.binload.com/downloadnzb.php</downloadURL>
<nfoURL>https://search.binload.com/getnfo.php</nfoURL>
<browseURL>https://browse.binload.com/index.php</browseURL>
<helpURL>https://help.binload.com/index.php</helpURL>
<communityURL>http://forum.binload.com/</communityURL>
</user>
If you guys want I can write a little program that will let you login with your email / pass and will then show your news server login details without you having to sniff it ;)
Done what you said but everytime i search for authinfo user it says cannot find!
You must be missing something...Quote:
Originally Posted by Jammie2k7
Are you interested in a program that will get the info for you automatically? Give me a day and I will code one ;)
Judging by the blitz of questions, it would seem that these "two minute" packet analyzers give a lot of people headaches trying to figure them out. They are, after all, designed more for technical people rather than the "point-and-click" unwashed masses. :)Quote:
Originally Posted by anon
In the days when people were trying to packet-capture the logins to free dialup ISPs like Juno and Netzero (so they would not be forced to run the buggy software all the time) there were dedicated one-click ("idiot-proof") applications like Rasspy and DialGuard that would intercept these logins -- without having to a run full-on network analyzer, which are far more complicated and feature-packed than the average person would ever need or want (or even know how to interpret).
enerdude - Do you think it would it require much work to put together a 'keygen-like' app that would extract the login details out of the packet stream? Such a tool would certainly be appreciated by many (though if successful, could spell the early demise of the free Binload era -- just as Rasspy did for Netzero).Quote:
Originally Posted by enerdude
My thoughts also. If anyone can easily extract the login data that'd be cool, but it may cause Binload to close or cease offering free services.Quote:
Originally Posted by zot
I'm not a coder by I know how to use software called winautomation, so I made a little program to do the job. It captures the details straight from binload's server (not from the packet stream), so you dont even need to install and run the binload software. All you need is the initial username (email) and password you selected when you signed up.Quote:
Originally Posted by zot
Attachment 85851
Installation and usage:
- The program require at least .NET framework 2.0
- Download and extract the rar file into a folder. The rar contains two .exe files
- Run the main program (Binload info tool by enerdude.exe)
Virusscan for those of you that dont trust me ;)
Download
Post your experience in this thread and enjoy! ;)
Well I created a program anyway. Use it if you please (I have already replied with a download link but the forum software told me my post must first be approved, so I guess it will be here soon)Quote:
Originally Posted by anonMy thoughts also. If anyone can easily extract the login data that'd be cool, but it may cause Binload to close or cease offering free services.Quote:
Originally Posted by zot
Edit: I only saw afterwards the virustotal report has 1 of 44 positive results from a AV program called Rising but it is obviously a false positive
thanks enerdude, much appreciated.
Ditto. For good or bad it may help a chap or two.
Yikes!
enerdude, your effort is very generous. Personally, I would request that your program be removed. The fewer the people taking advantage of Binload's offer, the better. Keep out the mouse-jockeys!
lmao so only you should know about it? hahaha get real its a public beta that ends on new year so have fun keeping a secret for the new 2 months, lol. your the reason people dont share good free servers, greedy little leeches, i hate shit like that. but you can look at all my free servers,leechers get jealous pl0x http://i1180.photobucket.com/albums/...069/harhar.jpg http://i1180.photobucket.com/albums/...069/harhar.jpgQuote:
Originally Posted by OldIronTits
Is that official? I guess I'll have to go back to XS Usenet next year, then. :unsure:Quote:
Originally Posted by JustDOSE
Nah, just4today is excellent for 0-day stuff. 10 days retention is more than enough in most cases for the average user.
Who do you think will use this info? People that will upload content to Usenet??? Think again, it's exactly the leechers you hate that will use this info and will exploit this 'trick' so it will stop working in no time. If someone isn't even capable to perform such a simple action with Wireshark or any other packet-sniffer, than they should refrain from using freeservers and just get a payserver.Quote:
Originally Posted by JustDOSE
And that's exactly the reason most 'free' alternatives are shared with a select bunch of people that have a clue what they are doing.
Lol @ your screenshot though, another FAILED attempt to impress the not so smart members of this board :rolleye:
New login data every day. And I'm lazy like that :PQuote:
Originally Posted by Cabalo
1. Let's see a pic of your uploading client? You even have one?Quote:
lmao so only you should know about it? hahaha get real its a public beta that ends on new year so have fun keeping a secret for the new 2 months, lol. your the reason people dont share good free servers, greedy little leeches, i hate shit like that. but you can look at all my free servers,leechers get jealous pl0x
2. I have more free servers than you.
3. "your" the reason.
Attachment 86188
I didn't read the whole thread but was wondering if there was a periodic password change.
Anybody used the program from enerdude?
Hell yeah, I have had 370 downloads on mediafire and not even 1 feedback. Thought I did the people a favour but not even 1 thumbs up....Quote:
Originally Posted by KFlint
edit: found this on google: http://en.cship.org/wiki/Free_Usenet...h_alt.binaries
it links to this thread and talks about a "free .NET Application from the Filesharingtalk.com-Forum". Lot of people might have found it via google....
it is closed.... both bintube and"free lifetime" 1 mbit access.. they even killed my account lol
What you mean by "both" is closed?Quote:
Originally Posted by Hypatia
I just tested binload and xsusenet lifetime 1mbit acess....both is still working for me.
Use my binload info tool if you need your access details for binload....easier than using wireshark or other tools ;)
the registration is closed =)
and it says that my account is locked =)
Quote:
Due to overwhelming demand for our free public beta we're currently not taking any new signups. Our apologies for the inconvenience caused.
.Quote:
Signups have been temporarily suspended due to high demand, we apologize for the inconvenience
LOL luckily my account still works. Did you download quite a lot that they locked your account or has one of your newsreader programs maybe got the connection still open so then it wont allow you to open another connection?Quote:
Originally Posted by Hypatia
nope i almost didnt use it at all=)
but i gave them some rubbish registration info like "name- 78ggugi" city- &*(gghu lol
Binload killed my account too. SABnzbd says it's not accepting connections from my node. I'd check if they've just changed the NNTP username and password, but I trashed my Binload login data after having some fun with SmartSniff, so I'm screwed. :lol:
Oh, and XS Usenet is still working for me.
Chances are good they have changed the NNTP user/pass. If you can remember the email address / pass you signed up with, you can use my program to retrieve your details ;)Quote:
Originally Posted by anon