SRL Archive - News and General

Account Stealer Checker
This is a short and simple script I made to check for the instance of procedures that may be used to steal passwords.

That does not necessarily mean that the procedures are being used to do that however. They can be used to check versions, download updates, etc.

Current Version: 0.01

Planned Updates:
1. Check what page they are accessing (easy)
2. Form (Highly improbable)
3. Check if a variable is being set to a player's password. Ex: z := Players[?].Pass;


Directions:
1. Copy and paste the below script into a SCAR window.
2. Click play.
3. Select the path of the script you want to check.
4. Click Open.
5. Read the debug box.

Program New;
  
var
  Counts : array [0..4] of integer;
  Params : array of string;
  ScriptPath, s : string;
  FileNum : integer;

procedure Browse;
var
  OpenDialog1 : TOpenDialog;
begin
  OpenDialog1 := TOpenDialog.Create(nil);
  OpenDialog1.InitialDir := AppPath + 'Scripts/';
  OpenDialog1.Filter := 'SCAR Files | *.scar';
  if OpenDialog1.Execute then
   ScriptPath := OpenDialog1.FileName;
  OpenDialog1.Free;
end;

function Count(s1, s2 : string) : integer;
var
  tmp : string;
begin
  tmp := lowercase(s2);
  if pos(lowercase(s1), tmp) >= 1 then
  begin
    repeat
      if pos(lowercase(s1), tmp) >= 1 then
      begin
        inc(result);
        delete(tmp, pos(lowercase(s1), tmp), length(s1));
      end;
    until(pos(lowercase(s1), tmp) <= 0);
  end;
end;


begin
  ClearDebug;
  Browse;
  if ScriptPath = '' then
  begin
    Writeln('You did not select a file. Please restart and select a file.');
    TerminateScript;
  end;
  
  FileNum := OpenFile(ScriptPath, false);
  ReadFileString(FileNum, s, FileSize(FileNum));
  CloseFile(FileNum);
    
  Counts[0] := Count('getpage(', s);
  Counts[1] := Count('openwebpage(', s);
  Counts[2] := Count('posthttppage(', s);
  Counts[3] := Count('posthttppageex(', s);
  Counts[4] := Count('gethttppage(', s);
  
  Writeln('Scan complete.');
  Writeln('');
  Writeln('Found ' + IntToStr(Counts[0]) + ' instances of GetPage.');
  Writeln('Found ' + IntToStr(Counts[1]) + ' instances of OpenWebPage.');
  Writeln('Found ' + IntToStr(Counts[2]) + ' instances of PostHTTPPage.');
  Writeln('Found ' + IntToStr(Counts[3]) + ' instances of PostHTTPPageEx.');
  Writeln('Found ' + IntToStr(Counts[4]) + ' instances of GetHTTPPage.');
  Writeln('--');
  Writeln('Please note that if a script includes these procedures it does');
  Writeln('not always mean that it is used to steal account info.');
  Writeln('');
  Writeln('Thank you for using my script.');
  
end.

Nice, I was thinking of making one these but in C# program along time ago when alot of people tried stealing accounts.

heheh. buckley add me on msn? [email]kylewollaston@hotmail.com[/email]

nice ;D

but.. some people like Floor and Camo have legit webby's they post to..

still works nicely :)

Precisely why I addressed that issue when I said

From: Da 0wner
That does not necessarily mean that the procedures are being used to do that however. They can be used to check versions, download updates, etc.

Would it be possible to display which lines have the GET, open, or POST commands on them?

Hey da 0wner, when you going to apply for members???
Also could I use your browse function please? :)

heh, sure :p.

From: Da 0wner
heheh. buckley add me on msn? [email]kylewollaston@hotmail.com[/email]

Yea, I get you when i get back from school :(.
Feel like skipping really but yea.

From: senrath
Would it be possible to display which lines have the GET, open, or POST commands on them?

Yes, most likely it would. I will try to do that in the next update.

Could this theoretically be used for me to hack my friends account?

From: goldrush655
Could this theoretically be used for me to hack my friends account?

You'll find that by looking at script. Dumb.

Omg nice!

From: goldrush655
Could this theoretically be used for me to hack my friends account?

Hacking or any type of account stealing is not allowed here as it causes troubles most of the time.

This can not be used to hack your friends account as it checks if the script is trying to access the internet in any way.

I don't know why you would think that…

because he doesnt know how to script, he doesnt know how to read the topic. He just saw the Title and was like "OMGRZ I C4N US3 TH1S 2 ST3AL MY FR13NDZ M0N3YZ 4ND P1X3LS!!!!

Heh, yup :/. I don't like people like that.

no one does.

But on topic, great script, ingenius idea (i think thats the word)!

Rep++

Are you sure you Repped :D. I still have 110 and I've had that :p.

I Must say, this is a very useful scripts. I've downloaded a few off other sites and had to check them for password stealing parts myself. This saves time, Thanks. :)