How do i create custom cookie?

General Discussion
1

Anyone to help create custom cookie like this one
bm_sv=38E3F829B5484BAF3DB847F12CD5D194~t7PyDbrCaymQn2UQ2LP/MNXPwPGbc+FLrwTLB+kqeKrbfpySni1J4aaKKsSb+zqktLne28wvQFBgrc0okw4RmnCGqTmG9Bn5OeZvZ3llaVmLR3WELRCmamhC+DoaxpUcvyeMtJ+uGAIaD84NUzT91hZvOVaKS6MvriXUAkT+dhE=;
bm_sv=4E8202B28C1AAA491EEFC7769708E3EE~Bld4fjeFdNnppAt0FpOfbqaIzGuxwYJqx7GzMUoyYSe+1IxDooST6SAcnf6yk3rcvu5KjcHiSpqsReUAuVkMT6Oslm3cIkg78OVRjy2OF0ncszVU64B5nCFDR3/hPe+NKalLZSeY1JjAAt2YyNm5lhSMYzZ/p1+WHaZQDxHCTIE=;

2
  • bm_sv
    This cookie is necessary for the Akamai cache function. A cache is used by the website to optimize the response time between the visitor and the website. The cache is usually stored on the visitor’s browser. The users bandwidth results are stored within this cookie to help ensure the bandwidth test isn’t repeated for the same user repeatedly for the Akamai cache functionality

PS: If you want to generate it you have to bypass Akamai Security

1 Like
3

is there a way to bypass?

4

I don’t know any but there might be some out there if you research alot abiu akami and CF and waf stuff. If you don’t have a lot of time to waste then give up you ain’t gonna get it

5

Exactly JustDaiXd , thoses data are from " MyCANAL France "

6

yes true to decode this you need DPAPI decoder like mimikatz software , and
Exactly as u seen

mimikatz cmd

dpapi::chrome /in:"C:\Users\kbell\AppData\Local\Google\Chrome\User Data\Default\Cookies" 
/masterkey:9a6f199e3d2e698ce78fdeeefadc85c527c43b4e3c5518c54e95718842829b12912567ca
0713c4bd0cf74743c81c1d32bbf10020c9d72d58c99e731814e4155b

image

READ MORE

I’v done before this issue as a suggest case in github
Check

all you need is Key encryption method to understand more how cookies works

1 Like
7

I see so @RifHut Do you actually think there is a way to bypass Akamai?

8

first you need to decrypt encryption first as possible akamai is antibot company like DATADOM , maybe the anti-bot check your browser x,y or if OpenGL detectable or note , the best way to bypass akamai is to use puppeteer stealth or puppeteer extra sharp

if you know what akamai and others what they do to detect u as a bot , try read this two posts.
1 - Bot detection engineering manager at Datadome ,tell us how works anti-bots and how to check if u are detectable
2 - this is checker help you to know what things make u detectable (headers,…innerhtml, browser settings , mouse movements …)

but exactly what check akamai for detecting u , we don’t know , just try and try … be sure you will get through it .

test that with puppeteer please if ok , we can do some editing in headers to try bypass the bot or edit some thisn in cookies we need stocking cookies in two differents way
1 - first with normale request from browser
2- second one from OB and we can compare outputs …

Good Luck :white_heart:

9

Yeah I know it can be bypassed using puppeteer and stealth plugin but ob2 doesn’t have implementation for using modules in it as it uses c# and so Puppeteer sharp and not actually nodeJS so it’s not possible in Ob2 right now but we can definitely try this method but the problems are that it’s too heavy uses a lot of resources and too slow

1 Like
10

Puppeteer extra sharp is the some as stealth plugin , now puppeteer in the last version work fine …, if you have a way to connect akamai with local SID , you will have overcome all kinds of antibots with u use simple request from ob2 akamai can’t detect you session id over DPAPI , already tested this shit on PSN manuelly ,also they use akamai … i try lotof methods , but without any good results only wasting time.

11

i think most problem wasnt puppeteer or cookies, it was proxy (maybe my methods was not enough??).

i created akamai bypass with custom chrome and chromedriver, then call from OB to get cookie.