In today's guide, we are going to learn sone tricks on
how to get our own working methods. You should note that, websites are always updating their systems to make things
difficult and hard for us. So Incase a method
stopped working, you must always find another trick or a way on how to deal with the website and bypass their Anti-Fraud system (Restriction).
So I made these tips to help you create your own working methods.
Ask yourself, What do I really want to card?
The categories of things you want to card (Clothes, Jewelry, Clothes, TV, Speakers etc.) and the site you are targeting.
First of all, Check my guide on (
FINDING STORES TO PUNCH)
You can search the categories of things you need like example ( Audio equipment, Clothes etc.).
A couple of stores will be listed. We will choose the one we want, Head to Google and check the reviews on
Truspilot to see if it's a reliable one and people do make purchases there.
Now it's time to do
RECON, Find out what type of
Anti-Fraud system is being implemented in store.
Usually there are two ways I use for RECON, they are :
1. Checking the store through
Wappalyzer or you can use their chrome
Extension
2. Http interceptors - "
Burp Suite or "
Caido"
a. With
Wappalyzer, it's simple.
We head to the
website, create an account. Verify the account and we can start our research on the stores. We will copy and input the the website of our choice. It will give us a clue of what the system uses and their inbuilt Anti-Fraud System.
Here is an example of a website I was checking :
View attachment 52580
View attachment 52581
View attachment 52582
View attachment 52583
b.
Burp Suite or
Caido - You download your preferred one and install it. But you will need to protect yourself with proxies if you are using this method. One of our good brother wrote a guide on it, you can check it here (
Reconnaissance)
After that, you should know the type of information each Anti-Fraud system takes, it varies.
Here is an example of how it looks like :
• Burp Suite
View attachment 52586
• Caido
View attachment 52588
If you find out about the website's information and you are okay with it, Head to the website,
Read their Privacy Policy, Frequently Asked Questions (FAQ) and Terms of Service (TOS) or Terms of Conditions. Also check their shipping policy (
if they ship to other places or only the billing address) and see if it suits your needs.
En este punto vamos a probar el sitio web usando una tarjeta prepago o inactiva (¿Motivo? Para realizar pruebas). Aunque algunos comercios no aceptan tarjetas prepago, solo estamos probando cómo funciona el sitio web mientras
interceptamos la transacción .
Ahora, procedemos a realizar una compra y observamos la solicitud que recibimos de nuestro
interceptor HTTP . Si todo está correcto, podemos continuar.
RESUMEN Y CONSEJOS
*** Texto oculto: no se puede citar. ***
Si todo va bien y sin problemas, entonces tu método funciona y puedes anotarlo (tu configuración, cómo gestionas la tienda y los contenedores que usaste). Pero si el pedido se cancela o se rechaza, espera unas horas e inténtalo de nuevo. Si el problema persiste, entonces hay un inconveniente y debemos solucionarlo.
CONCLUSIÓN :
Sin embargo, será cuestión de ensayo y error (pruebas) hasta que descubramos qué funciona, y no siempre será fácil. En fin, el objetivo es tener éxito.
¡MIS MEJORES DESEOS!
