Jump to content


Photo

Securing Your Compiled Bots.. Need everyones feedback


  • This topic is locked This topic is locked
262 replies to this topic

Poll: Securing Your Compiled Bots.. Need everyones feedback (91 member(s) have cast votes)

What version Ubot are you currently using as of 11/4/2011 ?

  1. Ubot v3 (9 votes [9.47%] - View)

    Percentage of vote: 9.47%

  2. Ubot v4 (86 votes [90.53%] - View)

    Percentage of vote: 90.53%

Vote

#1 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 09 April 2011 - 08:11 PM

Currently generating a system that can be dropped into Ubot Easily, and Manage User Licenses.

Current features:
  • Hardware locking to PC
  • Requires email address
  • Requires and checks payment transaction number
  • Currently setup for only 1 PC use
  • Administration to add, edit, delete, disable license

Built with:
  • 1 MySQL database
  • 1 .ubot file (easily added to any project to secure it)
  • 3 php files (1 connection, 1 processing file that works with ubot, and 1 file to include in any ipn file paypal, google checkout, alertpay etc.)

*the php files are setup to only work with the ubot files and direct injection to the script is safe guarded. You also receive an email when a License is granted legitimately and securely. As well as When someone tries to inject a license fraudulently. Can see a fraudulent attempt would try to access the web page Click Here And a email if turned on in setup would be emailed to the admin / owner with ip details for blocking



Before releasing this for the Community I want to make sure that I have everything as cleanly and as organized as possible. I also want to make sure that any needed functionality is included within this setup from the beginning for everyone. Please share any and all ideas here. Your feedback is very well appreciated.


*Special thanks to JohnB for the hardware locking technique

Preview admin panel - added 5-4-2011
http://uplink.botgur...ndex/index.html


Thanks,
TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#2 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 09:58 AM

28 views and no replies?

If you have any feedback what you personally would be interested in something like this and functionality. Please reply in this thread.

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#3 cnt

cnt

    Advanced Member

  • Members
  • PipPipPip
  • 54 posts
  • OS:Windows ME
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Standard Edition

Posted 10 April 2011 - 10:14 AM

@LoWrldErTJ


Interested in cracking your current bots.

Who tends to be your customer?

That's the bigger issue on security.

Can't prevent every cracker... but at least making the bar high. ;)


#4 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 10:23 AM

@LoWrldErTJ


Interested in cracking your current bots.

Who tends to be your customer?

That's the bigger issue on security.

Can't prevent every cracker... but at least making the bar high. ;)



My Current customers are game owners, local business owners, and online marketers. So its a very wide market.

You are correct on the fact you can't prevent every cracker. However making it deterrent enough to make others not waste their time trying is the goal. All basic cracking attempts, as well as some moderate and Higher end types of measures taken to crack software are being covered in this security setup.

One must know how to crack software before ultimately trying to prevent it. Or at the very least how the process works on trying to crack software.

That said i've been around for a while now and seen a lot of things, as well as worked with a lot of programs and webmasters. Have been shown some tricks here and there. This security setup is not yet finished but when completed should work out very well.

The price tag on it I was thinking of the word FREE or at the most $25.00 to keep people honest.

Not trying to get rich off this setup. But help secure the community and those making bots can secure the bots they release.

TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#5 zap

zap

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 767 posts
  • LocationUK london
  • OS:Windows 7
  • Total Memory:4Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 11:13 AM

At that price I may even buy it, but from what I have seen no software is uncrackable once released

#6 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 11:24 AM

At that price I may even buy it, but from what I have seen no software is uncrackable once released



Im not saying it would be a full proof way. When there is a will there is a way for hackers.

However take for instance Micros0ft and ad0be where they store the registration to the registry and pc and never phones home after the install. Easy to work around. but if your bot requires a phone home to the server every time it is ran chances are better that you can stop this sort of thing from happening.

As well even if someone was to change their hosts file in the system it requires information sent back to the program to run from the database on your server which can not be masked.

If shown to be running from more then 1 location (you get an email and ip) block the ip and disable the license :)

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#7 Kreatus (Ubot Ninja)

Kreatus (Ubot Ninja)

    Custombotsolutions.com

  • Fellow UBotter
  • PipPipPip
  • 2449 posts
  • OS:Windows 8
  • Total Memory:More Than 9Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 12:37 PM

This would be great TJ if you will give this to the community for free but I dont mind paying 25$ aswell since I really need this kind of security for my bots.

#8 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 12:40 PM

Yeah im in hopes to finish it before my Honeymoon on the 17th. But if not will have to sit on hold for 11 days while on my cruise.

Does anyone have any more ideas for it besides what it already does?

TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#9 Kreatus (Ubot Ninja)

Kreatus (Ubot Ninja)

    Custombotsolutions.com

  • Fellow UBotter
  • PipPipPip
  • 2449 posts
  • OS:Windows 8
  • Total Memory:More Than 9Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 12:42 PM

Yeah im in hopes to finish it before my Honeymoon on the 17th. But if not will have to sit on hold for 11 days while on my cruise.

Does anyone have any more ideas for it besides what it already does?

TJ


Is there some kind of admin system that we can access? Like if we need to add or block IP's. Or automatic license block when their free trial or subscription is done?

Thanks

#10 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 12:45 PM

The admin area currently
Administration to add, edit, delete, disable license

To fully block an ip is best with ip deny in cpanel but I can build in a system quickly for ip blocking right in the admin panel

and trials
I think this is something I will try to incorporate into it.

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#11 Anonym

Anonym

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 542 posts
  • Location127.0.0.1
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 01:45 PM

It would be great with a built in handling of updating the bots, that is, when a user runs a bot executable it checks towards the validation server if there is an update and if there is, it downloads it and installs it. If this could be accomplished it should also be able to handle several bots per customer.

I would definitely be interested in buying such a solution if it was available.

And no, you can't stop all cracking, but most ppl doesn't know how to crack or even how to find nulled software, so it will still help preventing unathorized use for some if not all.

#12 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 10 April 2011 - 02:51 PM

It would be great with a built in handling of updating the bots, that is, when a user runs a bot executable it checks towards the validation server if there is an update and if there is, it downloads it and installs it. If this could be accomplished it should also be able to handle several bots per customer.

I would definitely be interested in buying such a solution if it was available.

And no, you can't stop all cracking, but most ppl doesn't know how to crack or even how to find nulled software, so it will still help preventing unathorized use for some if not all.



A handling system for version type im sure can be incorporated. And Op to tell the user how to download and update, or initiate the update package for install.

Being able to handle several bots per custom wont be that much of an issue either.

Added to list of to dos.



Keep it coming people. I love the ideas, and I will evaluate all of them and try to get as many of them in as possible.


TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#13 Anonym

Anonym

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 542 posts
  • Location127.0.0.1
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 03:15 AM

A handling system for version type im sure can be incorporated. And Op to tell the user how to download and update, or initiate the update package for install.



Automatic updating would definitely be preferred as far as I can tell.

#14 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 08:58 AM

Automatic updating would definitely be preferred as far as I can tell.



On the list and will be in this package.
Basically it will check the version of the application (compiled bot they are using) If version different then what is available it will give them the option to download and update to the new version


Be it I have 3 days before my Honeymoon Cruise I doubt I will be able to get this completed in that time, and still keep up with clients of mine, and my web sites.

That said however I will be getting this done first thing when I get back around the 28th of this month.


Please keep the ideas coming. I am trying to get as much as possible incorporated into this security setup

TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#15 nuc63

nuc63

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 404 posts
  • OS:Windows 8
  • Total Memory:4Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 11:24 AM

Automatic Updating the software, easy interface to edit license and multiple ubot programs using same license are the #1 things I believe you should incorporate.

Websitebots.com        Ubots.info

FREE Bots:  Onpage Footprint Finder Bot.

FREE Bots with ads(ads displayed in hidden window):Glype Website Viewer, Simple Traffic Bot, 2 New Bots out before Oct 10


#16 Anonym

Anonym

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 542 posts
  • Location127.0.0.1
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 11:40 AM

On the list and will be in this package.
Basically it will check the version of the application (compiled bot they are using) If version different then what is available it will give them the option to download and update to the new version


Great!

Be it I have 3 days before my Honeymoon Cruise I doubt I will be able to get this completed in that time, and still keep up with clients of mine, and my web sites.


That is the wrong priority, you need to cancel that honey moon in favour of the Ubot community. ;) :D :) ;)


(have a nice trip!)

#17 Anonym

Anonym

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 542 posts
  • Location127.0.0.1
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 11:42 AM

How about being able to issue more than one license per bot per transaction ID/email address!?

(quite often the suppliers offers two licenses, one for the laptop and one for the desktop PC, not to be used concurrently though)

Maybe a tracking capability on the server side to check whether a certain license is used concurrently from different remote addresses!? That way a license could be revoked if used against the ToS.

#18 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 13 April 2011 - 12:11 PM

Automatic Updating the software, easy interface to edit license and multiple ubot programs using same license are the #1 things I believe you should incorporate.


Is definately something that will be included. The system will come setup to be able to issue up to 3 licenses per sale. However have different license types. Unlimited number of pcs, limited number maximum 3, trial (set in days 1-however many you like which could work into play with a subscription requirement)


Great!



That is the wrong priority, you need to cancel that honey moon in favour of the Ubot community. ;) :D :) ;)


(have a nice trip!)



I value my life. LOL


How about being able to issue more than one license per bot per transaction ID/email address!?

(quite often the suppliers offers two licenses, one for the laptop and one for the desktop PC, not to be used concurrently though)

Maybe a tracking capability on the server side to check whether a certain license is used concurrently from different remote addresses!? That way a license could be revoked if used against the ToS.



part 1 of this covered above.

Part 2 tracking.. This will be included to be able to track the location of use of the program. Case someone for instance sets it up on a VPS or dedicated windows box and sells access to it as I have seen some underground sites do. The license could be disabled.



TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg


#19 malefic

malefic

    Advanced Member

  • Fellow UBotter
  • PipPipPip
  • 525 posts
  • OS:Windows 8
  • Total Memory:3Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 14 April 2011 - 08:03 AM

TJ.

I have nothing more to add that the others here have mentioned but it sounds excellent, would be interested in it whether it be free (which is always nice) or $25.

Hope the honeymoon goes well!

#20 LoWrIdErTJ - BotGuru

LoWrIdErTJ - BotGuru

    Botguru.net

  • Moderators
  • 4039 posts
  • LocationMichigan
  • OS:Windows 8
  • Total Memory:8Gb
  • Framework:v3.5 & v4.0
  • License:Developer Edition

Posted 14 April 2011 - 11:50 AM

Thanks, and the build is going well. Added a great deal more features, and everything that has been expressed here as well.

Hope to have a updated features list and ETA soon.

TJ

Web Automation Bots @ BotGuru.net Want a Custom bot? click here or Email me
rjr.jpg





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users