Thursday, April 10, 2008 - New Generation of Carding - CCBill Vulnerabilities

You know CCBill?! Ah! I really bet you know, since CCBill is one ofthe biggest online payment processor(s) on earth - The one specializingtheir service(s) on adult content providers, that’s why some peoplecalled CCBill Porn Monster, right? Ok! Being the Porn Daddy is not thepoint of this topic, but a huge company such as CCBill having such aminor vulnerabilities yet can cause quite a huge financial damages isthe main topic here!

Do you want to know what kind of vulnerabilities they’ve got?! Why don’t you try to read this entire topic here?!

All you really need to find is some good-looking proxies which supporting SSL and are from United States of America (USA) - In most of the cases we can really find them on xRoxy (At least this is my most favorite place to find proxies).

I will assume that all of you know how to use proxies - If not please refer to Google.After having your US-based proxies working on your browser please go tosome website(s) that are selling their product(s) and/or service(s)with the help of CCBill as their main and only online paymentprocessor; for example DirectEssays (Even though we all know that most of CCBill’s customers are adult content related providers).

From this point, you can now open FedWireDirectoryto find some Bank Tracking Number(s) - It’s easy, just go to the siteand type any Territory and/or Cities that sounds very nice to youand/or you love the most and go click on the Search button. This is theexample of what you really need to do:

Ok! Basically this is what you really need to type:

First Name & Last Name: Create any name you like! (For Example: Mr. Dudley Doodle)
Address: I think Google can help you find the real address of the Bank you pick - Just type it there!
City: From what you’ve picked on the FedWireDirectory!
State: *** Same as the Above ***
Postal Code: Take the real postal code from the Bank’s address that you’ve find from Google!
Username: Anything!
Name on Account: The same as your First & Last Name (Mr. Dudley Doodle)
Routing Number: Just as what you’ve found on FedWireDirectory!
Account Number: Up to you! But if you insist to ask 6761453 will be great (Anything as long as it is 7 digits long)
Email: Any email address - They will never verify
Password: Anything!

Then click Submit!

That’s it! Once you’ve done those step(s) up there, you will beinformed that your account have been created and/or approved! Ofcourse, the account won’t stay alive for more than 1 day(s) - In factit will never be more than 8 hours, but guess what? You can still leechsomething out of those website(s) especially when they are offeringsome sort of video(s) and/or any other download-able stuffs as theirproduct(s); Video Tutorials, Porn Movies, Site Design(s), etc!

Last but not least - This kind of dirty little trick(s) is notworking only on CCBill, there are several other online check paymentprocessor(s) that is not doing the validation real-time too! But Iwon’t tell you guys all of it, just keep on doing your own research -Oh yeah! Have fun~

NB: I would like to thank Mr. Marvicfor telling me how to pack this kind of Tutorial(s) - I’ve been knowingseveral vulnerabilities like this from so long, but never know how topack it and tell all the people about this, so they can understand thedanger and can defend themselves. Now you teach me and I try to advicepeople with this kind of packed tutorial(s).

nyolong punya thor di : http://th0r.info/?p=81#more-81