#1
OP 16 September, 2023 - 12:31 PM (This post was last modified: 16 September, 2023 - 12:32 PM by silence35. Edited 1 time in total.)
Hello, secret hash variable has been added for security. I can't find how to create this, can anyone help me with an idea?

POST DATA : 

{"AuthFlow":"USER_PASSWORD_AUTH","AuthParameters":{"SECRET_HASH":"rlOo2Cei4TpGbCT67nDp7qmPSwzXckpzvbAvRXF8JHQ=","USERNAME":"[email protected]","PASSWORD":"l59nose3x"},"ClientMetadata":{"SFLY-Device-IPAddress":"172.16.53.15","SFLY-Application-Name":"SFLY_ANDROID","SFLY-Application-Origin":"MOBILE_SFLY_ANDROID","SFLY-Device-OS":"Android 7.1.1 Nougat","SFLY-Device-Model":"SM-G965N","SFLY-Device-Id":"44c95874d8698aa6","SFLY-Device-Manufacturer":"samsung","SFLY-Device-Wifi":"true","SFLY-Device-NetworkCarrier":"Turkcell","SFLY-Application-Version":"10.16.0","SFLY-Device-OSVersion":"7.1.2"},"ClientId":"5rv9c2fntj0r87tmv0ie4m11g1"}

----
If you delete the x in the password section, you will be able to log in. What is important to me is how the secret hash is created.
It creates a special secret hash for each e-mail address, the password does not matter.

[Image: a9sfMxt.png]

Here loliscript code ;
 
Code:
REQUEST POST "https://iam.shutterfly.com/" 
  CONTENT "{\"AuthFlow\":\"USER_PASSWORD_AUTH\",\"AuthParameters\":{\"SECRET_HASH\":\"rlOo2Cei4TpGbCT67nDp7qmPSwzXckpzvbAvRXF8JHQ=\",\"USERNAME\":\"[email protected]\",\"PASSWORD\":\"l59nose3\"},\"ClientMetadata\":{\"SFLY-Device-IPAddress\":\"172.16.53.15\",\"SFLY-Application-Name\":\"SFLY_ANDROID\",\"SFLY-Application-Origin\":\"MOBILE_SFLY_ANDROID\",\"SFLY-Device-OS\":\"Android 7.1.1 Nougat\",\"SFLY-Device-Model\":\"SM-G965N\",\"SFLY-Device-Id\":\"44c95874d8698aa6\",\"SFLY-Device-Manufacturer\":\"samsung\",\"SFLY-Device-Wifi\":\"true\",\"SFLY-Device-NetworkCarrier\":\"Turkcell\",\"SFLY-Application-Version\":\"10.16.0\",\"SFLY-Device-OSVersion\":\"7.1.2\"},\"ClientId\":\"5rv9c2fntj0r87tmv0ie4m11g1\"}" 
  CONTENTTYPE "application/x-amz-json-1.1" 
  HEADER "User-Agent: aws-sdk-android/2.22.6 Linux/4.0.9+ Dalvik/2.1.0/0 tr_TR" 
  HEADER "aws-sdk-invocation-id: 0ccc7b54-0cba-4b9a-a034-d8b0cc6cca23" 
  HEADER "X-Amz-Target: AWSCognitoIdentityProviderService.InitiateAuth" 
İ HATE LEECHERS  Pepi  ~ Thanks for understanding...
 
Leave Like ~ Just 1 Click  :comfy:  You can do this...  
 
More likes => More HQ Leaks
 
[Image: giphy.gif]