1. Registration on disney.com is very simple, without any encryption
2. You only need to solve one Google recaptcha
3. This is just a registration demo, if you need more functions, please code it yourself or contact me to customize the bot

1. Registration on hulu.com is very simple, without any encryption
2. You only need to solve two Google recaptchas
3. This is just a registration demo, if you need more functions, please code it yourself or contact me to customize the bot

I am too lazy to introduce it. Those who understand will understand it.

import base64
import requests
import json
import sys

# api config on https://www.clearcaptcha.com

main_host="http://api.clearcaptcha.com"
endpoint_hcap=main_host+"/captcha/hcaptcha_stable";
endpoint_inscap=main_host+"/captcha/incapsula_reese84_sub";
token = 'test'
user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"

session = requests.Session()

headers={
        "User-Agent": user_agent,
        "Accept": "application/json, text/javascript, */*; q=0.01",
        "Accept-Language": "en-US,en;q=0.5",
        "Accept-Encoding": "gzip, deflate, br, zstd",
        "Referer": "https://booking.flyscoot.com/",
        "Upgrade-Insecure-Requests": "1",
        "Sec-Fetch-Dest": "document",
        "Sec-Fetch-Mode": "navigate",
        "Sec-Fetch-Site": "same-origin",
        "Sec-Fetch-User": "?1",
        "Connection": "keep-alive",
    }

response = session.get("https://booking.flyscoot.com/Book/Flight?culture=en-US&type=oneway&dst1=SIN&ast1=CAN&dst2=CAN&ast2=SIN&dd=2024-09-13&rd=null&adt=1&chd=0&inf=0",headers=headers,verify=False)

jsurl="https://booking.flyscoot.com/amisu-It-should-drun-the-very-Donall-wift-the-Wi/16297114608146132505?s=f60ccUGy"
post_data = {
    "token": token,
    "jsurl": jsurl,
    "user_agent": user_agent,
}

response = requests.post(endpoint_inscap, data=post_data)
if response.status_code != 200:
    print({"error": "api error","status_code": response.status_code,"response": response.text})
    sys.exit()

response_data=response.json()
if response_data['code']!=200:
    print(response.text)
    sys.exit()

post_data=response_data['data']['post_data']
headers["Content-Type"]="text/plain; charset=utf-8"
response = requests.post("https://booking.flyscoot.com/amisu-It-should-drun-the-very-Donall-wift-the-Wi/16297114608146132505?d=booking.flyscoot.com", data=post_data,headers=headers,verify=False)
if response.status_code != 200:
    print({"error": "api error","status_code": response.status_code,"response": response.text})
    sys.exit()
response_data = response.json()
reese84=response_data['token']
session.cookies.set("reese84", reese84,domain="flyscoot.com",path="/")

post_data='"'+reese84+'"'
response = requests.post("https://booking.flyscoot.com/xildrong-in-I-confusing-freene-of-Duncannothin-b?d=booking.flyscoot.com", data=post_data,headers=headers,verify=False)
if response.status_code != 200:
    print({"error": "api error","status_code": response.status_code,"response": response.text})
    sys.exit()
response_data = response.json()
reese84=response_data['token']
session.cookies.set("reese84", reese84,domain="flyscoot.com",path="/")

headers["Content-Type"]="application/json"
headers["X-Scoot-AppSource"]="IBE-WEB"
headers["X-Scoot-Client-Environment"]="PROD"
headers["X-Scoot-Client-Session"]="3cf8743c-2aa3-4bdc-b9ec-3d47531b0c15"
headers["X-Scoot-Client-Version"]="0.0.0"

response=session.get("https://booking.api.flyscoot.com/v1/account/anonymous",headers=headers,verify=False)
if response.status_code != 200:
    print({"error": "api error","status_code": response.status_code,"response": response.text})
    sys.exit()
response_data = response.json()
authorization=response_data['data']['accessToken']

post_data = {
    "token": token,
    "referer": "https://booking.flyscoot.com",
    "sitekey": "81e02ccc-8862-41be-a7fe-c3f04ba0eb8c",
    "user_agent": user_agent,
    "is_invisible": True,
}

max_retries = 10 
retry_count = 0 
while retry_count < max_retries:
    response = requests.post(endpoint_hcap, data=post_data, verify=False)

    if response.status_code != 200:
        print({"error": "api error", "status_code": response.status_code, "response": response.text})
        sys.exit()

    response_data = response.json()

    if response_data['code'] != 200:
        print("Retrying request due to error:", response.text)
        retry_count += 1
        continue  
    else:
        print("Request successful!")
        break  
if retry_count == max_retries:
    print("Maximum retry attempts reached. Exiting.")
    sys.exit()
    
generated_pass_UUID=response_data['data']['generated_pass_UUID']
#user_agent=response_data['data']['user_agent']


post_data = '{"flightCriteria":[{"origin":"SIN","destination":"CAN","departureDate":"2024-10-13"}],"passengerCriteria":{"adult":1,"child":0,"infant":0},"currencyCode":"SGD","promoCode":"","salesCode":null,"flightFare":{"fareType":[],"productClass":["E1","E2","E3","E4","E5","J","P4","J4"],"classOfService":[],"maxConnections":20},"sortingOptions":["LowestFare","ShortestTravelTime","EarliestArrival"],"cultureCode":"en-us","bundleControlFilter":2,"ssrs":["FLXO","FLXM","FLXR"],"txnToken":"'+generated_pass_UUID+'"}'



headers["User-Agent"]=user_agent
headers["Authorization"]=authorization

response = session.post("https://booking.api.flyscoot.com/flights/availability",data=post_data,headers=headers,verify=False)
print(response.text)

ty

ty

I need too

the same

Many friends asked me how to register a spotify account. Today, I will share with you how I registered a spotify account.
1. There is no difficulty in registering a spotify account. It is nothing more than solving two recaptchas.
2. Pay attention to the quality of the proxy IP. Ensure that one account has one IP to prevent subsequent account blocking.
3. After registration, complete the information, listen to more music and be more active. If you think that manually cultivating an account is too slow, you can find me to customize a script to cultivate accounts in batches.

from math import fabs
import requests
import json
import uuid
import random
import string
import re


# captcha api config on https://www.clearcaptcha.com 
clearcaptcha_recaptcha_api="http://api.clearcaptcha.com/captcha/recaptcha_enterprise_v2v3";
token = 'test'
user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"


def generate_random_string(length):
    letters = string.ascii_letters 
    return ''.join(random.choice(letters) for _ in range(length))

session = requests.Session()

headers={
        "User-Agent": user_agent,
        "Accept": "application/json, text/javascript, */*; q=0.01",
        "Accept-Language": "en-US,en;q=0.5",
        "Accept-Encoding": "gzip, deflate, br",
        "Referer": "https://www.spotify.com/",
        "Origin": "https://www.spotify.com",
        "Upgrade-Insecure-Requests": "1",
        "Sec-Fetch-Dest": "document",
        "Sec-Fetch-Mode": "navigate",
        "Sec-Fetch-Site": "same-origin",
        "Sec-Fetch-User": "?1",
        "Connection": "keep-alive",
    }

response = session.get("https://www.spotify.com/us/signup?forward_url=https%3A%2F%2Fopen.spotify.com%2F",headers=headers,verify=False)
response_data=response.text
api_key=re.search(r'"signupServiceAppKey"\s*:\s*"([^"]+)"', response_data).group(1)
installation_id=re.search(r'"spT"\s*:\s*"([^"]+)"', response_data).group(1)
flow_id=re.search(r'"flowId"\s*:\s*"([^"]+)"', response_data).group(1)

post_data =  {
    "token": token,
    "sitekey": "6LfCVLAUAAAAALFwwRnnCJ12DalriUGbj8FW_J39",
    "referer":"https://www.spotify.com/",
    "recaptcha_anchor_size":"invisible",
    "page_title":"Sign up - Spotify",
    "action":"website/signup/submit_email"
}
response = requests.post(clearcaptcha_recaptcha_api, data=post_data)
response_data = response.json()
recaptcha_token=response_data.get("data", {}).get("recaptcha_token", {})


random_email = generate_random_string(12)+"@gmail.com"
post_data =  {
		"account_details": {
		"birthdate": "1999-02-12",
		"consent_flags": {
			"eula_agreed": True,
			"send_email": True,
			"third_party_email": True
		},
		"display_name": "wasdfas",
		"email_and_password_identifier": {
			"email": random_email,
			"password": "sfdasfda.123"
		},
		"gender": 5
	},
	"callback_uri": "https://www.spotify.com/signup/challenge?flow_ctx="+flow_id+"%3A1725101559&locale=us",
	"client_info": {
		"api_key": api_key,
		"app_version": "v2",
		"capabilities": [
			1
		],
		"installation_id": installation_id,
		"platform": "www"
	},
	"tracking": {
		"creation_flow": "",
		"creation_point": "https://www.spotify.com/us/signup",
		"referrer": ""
	},
	"recaptcha_token": recaptcha_token,
	"submission_id": "97543ddf-9c22-4600-b8d3-43027805f8a5",
	"flow_id": flow_id
}
post_data=json.dumps(post_data)

headers["Content-Type"]="application/json"
response = session.post("https://spclient.wg.spotify.com/signup/public/v2/account/create", data=post_data,headers=headers,verify=False)
if response.status_code == 200:
    response_data = response.json()
    print(response_data)
    session_id=response_data["challenge"]["session_id"]
    
    post_data =  {
        "session_id": session_id
    }
    post_data=json.dumps(post_data)
    
    response = session.post("https://challenge.spotify.com/api/v1/get-session", data=post_data,headers=headers,verify=False)
    response_data = response.json()
    challenge_id=response_data["in_progress"]["challenge_details"]["challenge_id"]
    
    post_data =  {
        "token": token,
        "sitekey": "6LeO36obAAAAALSBZrY6RYM1hcAY7RLvpDDcJLy3",
        "referer":"https://challenge.spotify.com/",
        "recaptcha_anchor_size":"normal",
        "page_title":"Spotify",
        "sa":"challenge"
    }
    response = requests.post(clearcaptcha_recaptcha_api, data=post_data)
    response_data = response.json()
    recaptcha_token=response_data.get("data", {}).get("recaptcha_token", {})
    
    post_data =  {
	    "session_id": session_id,
	    "challenge_id": challenge_id,
	    "recaptcha_challenge_v1": {
		    "solve": {
			    "recaptcha_token": recaptcha_token
		    }
	    }
    }
    post_data=json.dumps(post_data)
    response = session.post("https://challenge.spotify.com/api/v1/invoke-challenge-command", data=post_data,headers=headers,verify=False)
    print(response.text)
    
    post_data =  {
	    "session_id": session_id
    }
    post_data=json.dumps(post_data)
    response = session.post("https://spclient.wg.spotify.com/signup/public/v2/account/complete-creation", data=post_data,headers=headers,verify=False)
    if "login_token" in response.text:
        print(response.json());
    else:
        response_data={
            "error": "complete-creation error",
            "status_code": response.status_code,
            "response": response.text
        }
        print(response_data)

    
else:
    response_data={
        "error": "api error",
        "status_code": response.status_code,
        "response": response.text
    }
    print(response_data)
    

The login of https://www.premiersports.com/us/login switched from recaptcha to CloudFlare turnstile, but it is also simple, and it is easy to solve it.

However, it should be noted that: Keep the website and IP in the same region, otherwise the address will be adjusted to the region and you will not be able to log in successfully.

The following is the python code, modify your clearcaptcha token to see the effect.

import requests
import json
import re
import sys

# captcha api config on https://www.clearcaptcha.com 
clearcaptcha_api="http://api.clearcaptcha.com/captcha/cloudflare_turnstile";
#change your token
token = 'test' 
#Keep the website and IP in the same region, otherwise the address will be adjusted to the region and you will not be able to log in successfully.
url = "https://www.premiersports.com/us/login" 
user_agent = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
chlApiSitekey = "0x4AAAAAAAhLu-06g4o3tB7m"

session=requests.session()

post_data = {
    "token": token,
    "url": url,
    "chlApiSitekey": chlApiSitekey,
}
post_data=json.dumps(post_data)

response = requests.post(clearcaptcha_api, data=post_data)
if response.status_code == 200:
    response_data = response.json()
    print(response_data)
else:
    print({
        "error": "api error",
        "status_code": response.status_code,
        "response": response.text
    })
    

cf_turnstile_token=response_data.get("data", {}).get("cf_turnstile_token", {})

headers={
        "Content-Type":"application/x-www-form-urlencoded",
        "User-Agent": user_agent,
        "Accept": "application/json, text/javascript, */*; q=0.01",
        "Accept-Language": "en-US,en;q=0.5",
        "Accept-Encoding": "gzip, deflate, br, zstd",
        "Referer": "https://www.premiersports.com/us/login",
        "Origin": "https://www.premiersports.com/us/login",
        "Upgrade-Insecure-Requests": "1",
        "Sec-Fetch-Dest": "document",
        "Sec-Fetch-Mode": "navigate",
        "Sec-Fetch-Site": "same-origin",
        "Sec-Fetch-User": "?1",
        "Connection": "keep-alive",
        "Priority": "u=1"
    }

response = session.get(url,headers=headers,verify=False)
responseText=response.text
match= re.search(r'<meta\s+name="csrf-token"\s+content="([^"]+)"', responseText)
if match:
    csrf_token = match.group(1)
    print(csrf_token)
else:
    print(f" not found csrf-token")
    sys.exit(1) 
    
post_data =  {
    "email": "[email protected]",
    "password": "test123456",
    "remember":"on",
    "_token":csrf_token,
    "cf-turnstile-response":cf_turnstile_token,
    "g-recaptcha-response":cf_turnstile_token,
}

response = session.post(url, data=post_data,headers=headers,verify=False)
responseText=response.text
if "These credentials do not match our records" in responseText:
    #Continue with the following operation 
    print("These credentials do not match our records.");
else:
    response_data={
        "error": "api error",
        "status_code": response.status_code,
        "response": ""
    }
    

Since using shape to solve the API server, the speed of the checker has become very fast, and the hit rate has almost reached more than 80%. 

A fruit's GSA login is an improvement on the standard SRP6a, It is very difficult to spell out each parameter of SRP through plain text parameters. Only by reading its js can we get the SRP login process.
The parameters are as follows:

N is a large prime number of 2048 bits. From RFC5054-2048. The document is big-endian. Display fixed value
g In this case, it is 2. Fixed value
salt sent by the server
username username
password password. The password involved in SRP arithmetic operations is not plain text
privateKey client private key
a client public key
b server response public key
iteration
protocol
M1,M2: verification password

These parameters are constantly being encrypted with sha256 combination.

The following is the result after I encrypted it and compared it with the one on the website. They are exactly the same, so the problem of m1 and m2 is solved.

ok

let me see

use http request api etc