esniper: a lightweight eBay sniping tool / Bugs / #783 Login fails on 'Security measure page"

Michael S. - 2020-01-14

If you try to install libwebkit2gtk-4.0-dev on a headless system a huge number of additional packages have to be installed. I'm afraid, that esniper then won't be portable to BSD and other OS-platforms in the future.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Alex Rainchik - 2020-01-14
  
  libWPE could be another option, WPI is another port of WebKit, specifically designed for small/embeded devices and as far as I understand is capable of running in headless mode.
  
  https://wpewebkit.org/
  
  https://webengineshackfest.org/2016/slides/from-webkit-for-wayland-to-wpe-zan-dobersek.pdf
  
  Enables headless mode - snapshotting graphical output without visually presenting it.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
  - Dave K - 2020-01-15
    
    I agree that adding WebkitGTK or something of similar functionality will make esniper much “heavier”. – I think when eBay moved to client side login scripting the fate of a lightweight esniper was sealed.
    
    It may be possible to re-code esniper in javascript and use node.js along with a DOM emulator such as jsdom https://github.com/jsdom/jsdom to try to emulate all of the fingerprinting calls that are made. This would eliminate the need to incorporate a full browser but I’m not certain it’s worth the effort just to minimize the footprint of esniper.
    
    I think there are many embedded platforms such as Raspberry Pi that are big enough to support something like Webkit. I did some preliminary searches and it seems WebkitGTK has been ported to FreeBSD and iOS too.
    
    If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alex Rainchik - 2020-01-15

One more option - Headless Cromium, which can be used as C++ library. https://chromium.googlesource.com/chromium/src/+/lkgr/headless/README.md

Headless Chromium can be built as a library for embedding into a C++ application.

This will require writing 'external "C" {}' wrapper, so C++ code can be usable in C application.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Wade Berrier - 2020-02-29

I noticed that some online sniper sites are now "linking" their accounts with ebay, such that that particular site does not need the user's ebay password.

Maybe esniper could do something like that?

Other command line tools work with a similar mechanism, where you use the cli tool to "authorize", it spits out a link to open in a browser, credentials are entered, it spits out a "key" for the CLI app to use.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- John Cuzzourt - 2020-02-29
  
  Hey Wade, that's a good thought. If there is an API available for Ebay that allows a OAUTH2 type token to be generated for an app that includes the ability to read the listing and to make bids, it seems like the way to go.
  That said, I know little of the specifics going on in this whole case. I haven't been using eSniper for a while now, but it's a wonderful tool when it works.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
  - Alex Rainchik - 2020-02-29
    
    eBay’s API Terms of Services specifically prohibit using them for sniping.
    
    On Feb 29, 2020, at 3:48 PM, John Cuzzourt jpcuzzourt@users.sourceforge.net wrote:
    
    Hey Wade, that's a good thought. If there is an API available for Ebay that allows a OAUTH2 type token to be generated for an app that includes the ability to read the listing and to make bids, it seems like the way to go.
    That said, I know little of the specifics going on in this whole case. I haven't been using eSniper for a while now, but it's a wonderful tool when it works.
    
    [bugs:#783] https://sourceforge.net/p/esniper/bugs/783/ Login fails on 'Security measure page"
    
    Status: open
    Group: v1.0 (example)
    Created: Sat Oct 12, 2019 01:04 PM UTC by NickT
    Last Updated: Sat Feb 29, 2020 09:07 PM UTC
    Owner: nobody
    Attachments:
    
    esniper.1640.1.bug.html https://sourceforge.net/p/esniper/bugs/783/attachment/esniper.1640.1.bug.html (14.2 kB; text/html)
    I'm unable to start a bidding process on my raspberrypi (Buster lite) and I get html 8 bug files esniper.1640.1.bug.html to esniper.1640.8.bug.html. All of them have a 'Please verify yourself to continue'/ Complete Captcha button when I view the html files in my browser afetr FTPing them over from the pi. I've had this before and it fixed itself. I've built esniper from the latest git code (including auction.c which has the latest attempt at fixing 778) This may well be the same problem as the validating javascript bug but I'm putting it here as added information.
    
    I have logged in and out and in agagin on ebay.com and ebay.co.uk to no effect. Here's the start of my cosole o/p on the pi which I am running headless and access from my Windows PC or my Android tablet.
    
    esniper instauc
    esniper encountered a bug. Please go to:
    http://sourceforge.net/tracker/?func=add&group_id=45285&atid=442436 http://sourceforge.net/tracker/?func=add&group_id=45285&atid=442436
    paste this into "Detailed Description":
    Automated esniper bug report.
    esniper version 2.35.1
    libcurl/7.64.0 GnuTLS/3.6.7 zlib/1.2.11 libidn2/2.0.5 libpsl/0.20.2 (+libidn2/2.0.5) libssh2/1.8.0 nghttp2/1.36.0 librtmp/2.3
    Error encountered in function ebayLogin in auction.c line 576
    auction = 202794782167, price = 8.87, remain = 0
    latency = 0, result = -1, error = 0
    buf = 0xaaf438, size = 14162, read = 0xaaf438
    time = 1570884142, offset = 0
    pagename = "Security Measure", pageid = "(null)", srcid = "(null)"
    specified options or config values:
    1 x username(u) =
    1 x password() =
    1 x seconds(s) = 2
    1 x (f) = "instauc"
    1 x bid() = 1
    1 x debug(d) = 1
    getVals cannot find rqid (headerVals)
    then upload and attach esniper.1640.1.bug.html and click submit.
    esniper encountered a bug. Please go to:
    http://sourceforge.net/tracker/?func=add&group_ http://sourceforge.net/tracker/?func=add&group_
    etc
    
    I hope this is of some use. If it's too close to any other bug, please feel free to close it as a duplicate.
    
    Sent from sourceforge.net because you indicated interest in https://sourceforge.net/p/esniper/bugs/783/ https://sourceforge.net/p/esniper/bugs/783/
    To unsubscribe from further messages, please visit https://sourceforge.net/auth/subscriptions/ https://sourceforge.net/auth/subscriptions/
    
    Related
    
    Bugs: ~~#783~~
    
    alternate
    
    If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Wade Berrier - 2020-02-29

oauth documentation here:

https://developer.ebay.com/api-docs/static/oauth-tokens.html

Looks like you have to have an "active eBay Developer Program" account.

Here's an example of a sniper site using a token instead of username/password: https://www.perfectsniper.com/news.php?id=131

Last edit: Wade Berrier 2020-02-29

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Andreas Schwarz - 2020-02-29
  
  Ebay never ever want to support sniper programs, they undermine their business model in many ways.
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michael S. - 2020-03-17

Another idea:
node.js and jsdom

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michael S. - 2020-05-30

In some cases a older commit works:
https://sourceforge.net/p/esniper/git/ci/69675c03e17bad51c41a07e1453d897eb8c401af/

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michael S. - 2020-06-11

I've created a legacy branch. To clone this branch, type

git clone git://git.code.sf.net/p/esniper/git -b legacy esniper-git-legacy

Some enhancements to the original commit 69675c has been applied:
- http removed
- Working watchlist
- Enhanced html decoding

Last edit: Michael S. 2020-06-11
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michael S. - 2020-06-12

status: open --> closed-fixed
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Huy Le - 2021-12-13

Hi, I'm following this ticket. What is its current status now? I pulled and compiled Michael's esniper-git-legacy on macOS but still does not work.

Edit: nvm, I read other threads, looks like not an easy fix. Appreciate for your effort, Michael :)

Last edit: Huy Le 2021-12-13

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Michael S. - 2021-12-13

The esniper do not work anymore, because of the JS within the login process.
A complete redesign based on java is needed. I've done some investigation with javafx, but I'm too busy at the moment to do some more development.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Login fails on 'Security measure page"

Group

Searches

Help

#783 Login fails on 'Security measure page"

Related

Discussion

Related