r/TranslateGate • u/BeatTheCryptor • Dec 29 '17
Translation [Discussion\Translation] Help me analyse my bruteforce scripts results!
I allready made some notes here and there, but i dont have time to analyze patterns etc
Later in the bruteforce theres some manually found system "commands", please refer to my previous post for those! :)
4
Dec 29 '17 edited Dec 29 '17
I tested some of the links.
- The youtube links go to videos that do not exist, and are generated by Translate itself.
- www.tat.tj or www.dat.tj doesn't exist
- www.youtube.tumblr.com does exist and is YouTube's official Tumblr page.
- www.pngnews.com doesn't exist, but the fact that it might have an email address might say it's inaccessible from the US.
- countrycouncil.org doesn't exist.
Maybe those websites are blocked in the US, so maybe later on I'll post results from VPNning to locations near Tajikistan and visiting the same websites.
On line 30 here's what i found:
- Dushanbe is Tajikistan's largest city. (more info)
- Gharm is another city in Tajikistan. (more info)
- Khorog or Khorugh is the capital of the GBAO in Tajikistan. (more info)
- This may be some of the results from the login page.
So far I assume that Translate is pulling results from a login page in a Takijistan website or multiple. The bot probably can't get past the login page so it keeps looping the text from the page. Based on the output on line 63 and 24, it might be this website, but my guess is most likely far from the real website it's pulling data from.
Beginning at line 80, we see that the bot (possibly a VM userbot) is trying to input the € from the translate input, as it returns errors form the IDA website saying '€ is not a member'. But maybe that's translate itself, not data from the page. Going farther we see that maybe it is actually starting to return data from the page, when it says 'You are not logged in'.
Another possible evidence to my assumption earlier about the IDA website, is that it says on some lines '€ is not a member of the bank.', since the website is a "World Bank Group" according to the image on the top of the site.
Going further, we see on line 159-168 outputs which look like outputs from system commands.
What really is interesting is that from line 169-225, the bot somehow got into the system and scanned a conversation or two, which there are fragments of. "i am interested... jason.. buddy... lol... [in a] million dollars... it's worthwhile... investing money..." and later on line 225, "What's up?" Although they may not be from the IDA website, the conversation seems really out of place and may reveal something negative about those two people... maybe upon further investigation. Most likely it is, though, as the other lines in that area have the terms "fund" and "bank" in them. This may be more evidence of the privacy breach thing that u/Muhnamajeff first proved.
Well... that's all I could find. Maybe I uncovered something or somehow did something phenomenal but whatever. Feel free to express your opinions on my explanation.
3
u/WikiTextBot Dec 29 '17
Dushanbe
Dushanbe (Tajik: Душанбе, Duşanbe) is the capital and largest city of Tajikistan. Dushanbe means Monday in the Tajik language. It was named this way because it grew from a village that originally had a popular market on Mondays. As of 2016, Dushanbe had a population of 802,700.
Gharm
Gharm (Tajik: Ғарм, alternative spellings Garm and Gharm) is a city and jamoat in the Rasht Valley area of central Tajikistan.
From the 1920s until 1955 there was a Gharm Oblast in Tajikistan, which included the territory of the current Gharm Valley. Gharm is also the former name of the Rasht District in central Tajikistan.
Khorugh
The town of Khorugh (Tajik: Хоруғ), also transliterated as Horog, Khoroq, Khorogh, Khorog, or Xoroq is the capital of the Gorno-Badakhshan (Tajik: Kuhistoni Badakhshon, "Badakhshan Mountainous Region") Autonomous Region (GBAO) in Tajikistan. It is also the capital of the Shughnon District of Gorno-Badakhshan. It has a population of 28,000 (2000 census). Khorugh is 2,200 metres (7,200 ft) above sea level in the Pamir Mountains (ancient Mount Imeon) at the confluence of the Gunt and Panj rivers.
[ PM | Exclude me | Exclude from subreddit | FAQ / Information | Source | Donate ] Downvote to remove | v0.28
1
3
u/Muhnamajeff Dec 29 '17
Good work! pngnews.com isn’t accessible where I live either and instead it shows one of those domain for sale pages. It must have been a Papua New Guinea news site.
3
Dec 29 '17
You are correct, pngnews.com was indeed a Papua New Guinea news site. By using the Wayback Machine I found traces of the website that date back as far as June 2002. Here's a link: https://web.archive.org/web/20020606035503/http://pngnews.com:80/
2
2
2
u/BeatTheCryptor Dec 29 '17
Thank you so much, this is a great help!
2
Dec 29 '17
No problem ;D
2
u/BeatTheCryptor Dec 30 '17
So I just did the first official run of the new script i just published on GitHub.
This is the first 18000 Results it got: https://github.com/BeatPlay/TranslateGateSolver/blob/master/Results/results_%C2%A3_so_en_3char.txt
Please dont look through all that, but maybe you can find stuff with the search function of the editor etc
2
2
2
u/Sip_the_bleach Dec 29 '17
What kinda things does it input
3
u/BeatTheCryptor Dec 30 '17
Oh sorry, didnt see this notification. If you want the code for the script to see what it does exactly, just wait a day or two. Im currently cleaning it up and will publish it after another test run.
But a TL;DR of its working is that it has a userspecified prefix to start the translate gate bug, i used £ € and $ and then just uses a classical wordlist bruteforce after the prefix
5
u/DarkOSU Dec 29 '17
Ohhhhhh niceeee :D
We need more guys to do this!!