Bypass Paypal

[f0t0n]

How to bypass Paypal’s payment portal using a piece of JavaScript and get all the products for free. looks like every single stuff online has a secret black hole. hacking paypal buy now button
PayPal allows payments and money transfers to be made through the Internet. It also performs payment processing for online vendors. Normally when you pay the website using Paypal’s “pay now” button, as soon as you make the payment you will be redirected to a secret download page, where in you can find download links for the described product. Remember this download page is secret, but anyone who knows the URL of this page can access it. Now this hack works only for this type of download pages, i.e. for websites using Paypal’s “Pay Now” button.
Such websites having PayPal portal for payment are vulnerable and can be easily exploited using simple javascript. The javascript bypasses the payment page and redirects the user to download page.
Example Website :

http://www.magictrickcollection.com/download-magic.htm

First make sure you are using Javascript enabled Browser, better use Mozilla Firefox.
Next, Go to the respective download or ‘buy now’ page of the website and copy-paste this code

javascript:top.location=document.getElementsByName('return')[0].value; javascript:void(0);

in the address bar and hit enter. viola!, you are now being redirected to the download page!
You can easily find more infected websites by using google dork: “this order button requires a javascript enabled browser”
i.e. Go to google and search for “this order button requires a javascript enabled browser” , you will get all the websites that are using this outdated button

this is a sample sites:

• 
  http://www.buyfanpagetraffic.com/
  http://myforexedge.com/
  http://www.doctorisin.net/
  http://www.websitesfornotaries.com/99dollarwebsites.htm
  http://www.giftsofdivinity.com/godpurpose.html
  http://www.optimizemywebsites.com/seo_4.html
  http://www.peigifts.com/
  http://www.thenettle.com/forsale/makingsoftware/
  http://www.ebay-secretsonline.com/ordernow.htm
  http://www.townsquareamerica.com/Shot_Glasses.htm
  http://www.cbsqueezevideos.com/
  http://donnamaher.com/birthday/
  http://www.wildonehosting.com/
  http://www.magicities.com/streetmagic/
  http://www.stuccotools.com/diana-gun-hopper/
  http://lifechurchmv.com/audio/
  http://ironoverload.info/ironichealth/
  http://www.ecom-soft.com/mscsoft.html
  http://resilient2disaster.com/hwy/i90.ph...owser-n95'
  http://www.dubai-mobiles.net/ebooks.htm
  http://www.bensonawong.com/
  http://go2ebayriches.com/
  http://win-traffic.com/sales/index.htm
  http://businessuncommon.com/ebay3/
  http://microcourse.info/maldives-usenet-browser-model/
  http://www.mindpower4you.com/publicspeakingaudio.html
  http://www.18.77special.com/traffic/MegaTraffic.html
  http://turnbuckleman03a.com/imagecreator/
  http://www.yourmodern.com/business.html
  http://www.lightsoflove.us/LLAW/vol105.php
  http://www.pitbullcoaching.com/
  http://instantnichewebsite.com/
  http://sellingonlinemadeeasy.com/Phase1/index.php
  http://1stopdigitalproducts.com/awebtools/
  http://www.z2wealthsystem.com/TwitterVideoTutorials/
  http://angelkeeperdesigns.com/join.htm
  http://www.pleazz.com/craigs/PR_6_Backlinks.htm
  http://www.mastersofnewthought.com/gwaysignup.html
  http://www.my6dollarsite.com/mmills/sales-page.htm
  http://signupspro.com/Order_Signups.html
  http://utilityspot.com/signup.htm
  http://www.domaincity.ws/
  http://www.7dollarsecretspro.com/offer.html
  http://rumblesfromthejungle.com/gmkt_v1.htm
  http://turbographics09.com/order.html
  http://stuccotools.mobi/diana-gun-hopper/
  http://www.jonathanhendricks.com/webmaster/
  http://www.php-tutorialbook.com/
  http://www.tallentagency.com/adware_spyware/index.htm
  http://myrdhinn.com/
  http://businesspromembers.com/utube/
  http://www.earneasymoneynow.com/webtools/webtools.htm
  http://www.snouthouse.com/order.htm
  http://www.designingebookcovers.com/starter.htm
  http://www.real-freedom.com/OrigEprods/index.htm
  http://knightthunder.com/listcleaner.php
  http://www.mindblowingmindreading.com/findout.php
  http://www.globaltechmktg.com/adassassin.html
  http://www.richardhackworth.com/millionaire.php
  http://www.videoepidemic.com/
  http://www.thecossgroup.com/1/Auto/index.html
  http://www.listbarter.com/US_Business_List_CD.shtml
  http://www.ebooks-made-easy.com/articlemachine/
  http://www.9.77plr.com/NPWT.html
  http://www.xtasys.com/cursiveletters.html
  http://www.sfielite.com/sfiteamcoop.html
  http://www.jcjmarketing.org/ordering.html
  http://ckoch02.tripod.com/
  http://summithealthllc.com/stat-dlin...eless-network/
  http://www.dawesrolls.com/dawes/INDEXonCD.aspx
  http://tamiltest.com/cfd-swarovski-bead-tree-tutorial/
  http://www.psychotherapy-for-hypnotists.com/
  http://www.qballcafe.com/
  http://www.100hypnoticsalestips.com/
  http://www.fasttrackforex.com/course/
  http://www.emailprocessinghomebiz.com/
  http://www.allthatwomenwant.com/recipecollection.htm
  http://www.socialtrafficdetonator.com/
  http://www.totalresalerights.com/tr-order.htm
  http://www.trainmycat.com/order.htm
  http://grinderswitch.com/
  http://www.adsensetracker.info/
  http://www.rverscorner.com/painless.html
  http://www.militaryebooks.com/self-defense.php
  http://www.desktop-wealth.com/soft/instant/ism/ism.htm
  http://www.credit-improve.com/
  http://www.myscriptindex.com/ff/
  http://www.slamyoursites.com/
  http://www.linkpopularity.ws/
  http://www.6figuremarketing.com/barrs/audio.html
  http://concepts4sitedesign.com/
  http://ideal-deals-resell-package.com/tr-order.htm
  http://www.cmark1.com/beer/brew_your_own_beer1.htm
  http://www.amazingmindreading.com/findout.php
  http://inkingdaze.com/stu-fruit-spanish-abc-order/
  http://jollyobama.com/obama_jockey_standup.html
  http://www.aysdesigns.com/payments.html
  http://www.becoming.net/mks/eebve.html
  http://jtscc.com/scm-ps2-homebrew-browser/
  http://www.testedtough.com/
  http://www.tophathosting.com/tophatlist/index.html
  http://www.concentus-tech.com/software.html
  http://www.netbooksoasis.com/ar-unlimited/index.html
  http://www.rodgerhyatt.com/ens/
  http://stopthecop.com/products.html
  http://thetoolman.net/softwareclub/screenshowpro/
  http://www.ebookstarter.com/register/purchase2.php

 

[GENERAL7]

thats very interesting,good share+++

 

[thom crowzz]

pasted already showthread.php?p=253569#post253569 updates waiting on new vulneralabilitiez

 

[TheMJ]

anyone try this method? is itworking for you?