Nulled.to Authentication system?

[iHaveDeBestName]

so uh, for my cracker i want to only allow people with 50 likes or more to use it, is there a way of doing this or is there a api for this?

 

[MexicanTobato]

ask for https://www.nulled.to/auth.php access

[iHaveDeBestName]

ask for https://www.nulled.to/auth.php access

 

YES BUT HOW DO YOU CHECK FOR THE REQUERIMENTS, how do i check if its valid sorry for caps

[XenocodeRCE]

YES BUT HOW DO YOU CHECK FOR THE REQUERIMENTS, how do i check if its valid sorry for caps

 

a basic fame like me got access so should have access to 

 

[AZATEJ]

You wont get access due to really simple law restrictions which nulled avoid. No matter whatever goldmine would you add to it.

[Minecon]

 

I wanted to ask the same a few months ago too...
 
Well, I see that the authentication system is completely dead - there's no API to do this now.
 
There's a way to do this:
 

1. Put a Form (even if your application is a console application) and set its URL to the Nulled.to's login page.
2. Put another Form and put a WebBrowser control in this Form .
3. Set the WebBrowser URL to "https://www.nulled.to/auth.php"
4. Check if the WebBrowser control contains "You meet all requirements and can authenticate" like this:

if (webBrowser1.DocumentText.Contains("You meet all requirements and can authenticate"))
{
      // The user is authenticated.
}

What can a hacker do to bypass this?
Simply, he can just create a local webserver and edit the `hosts` file so `nulled.to` points to 127.0.0.1 - then he can create a file called `auth.php` on his local webserver and write "You meet all requirements and can authenticate" in it.
 
Can I bypass the hacker's bypass?
Yes! Check if the nulled.to's IP starts with 104.x.x.x or no... If no, then the user edited the `hosts` file to bypass this. If yes, then the user didn't try to bypass this.
The hacker still can bypass this but a bit harder.

[Jonmii]

Harder....?  use fiddler.... and edit response.. same ip not host edit and easily bypassed. kiddies.

[MexicanTobato]

Harder....?  use fiddler.... and edit response.. same ip not host edit and easily bypassed. kiddies.

Easy to say, have you ever heard about 'Protection'?