0

Badoo (a Tinder-like service) desktop browser app sends the following message to the server with a sign-in request:

"server_login_by_password":{
    "user":"xxx",
    "password":"xxx",
    "stats_data":"xxx"
    }

While user and password are obvious, the mechanism of stats_data is something I'm yet to figure out:

  • When this field is not provided, a captcha screen is presented to the user, so it seems that this is some sort of bot-prevention mechanism.
  • In my case every time the field was between 4000 and 10000 characters. It always starts with JTE5d and has some repeating strings troughout. But it does not always end with the same characters.
  • It definetely is not tied with the session. I can easily reuse stats_data from long expired session and it will be accepted.
  • It's also not tied in to accounts. I can use the field value generated when logging in to account X to log in to acccount Y.
  • If I add some extra chars to the end of the string, they get ignored. If I add some to the beginng or in the middle, an error appears.

Here's an example contents of the field:

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

And here's the same after being decoded with base64 (which I did just blindly hoping it'll produce somethin I'd be able to understand):

%19vnrnqnqn%19%19vsnpqsvnzrqptlsqtqvvpzrzz%1Fn%19wpnqpwsnvzuqqlrrzuzpwv%7Brp%1Fn%19u%7Bntzrnoptps%7Blswzqqzz%7Bvr%7Bt%1Fn%19%7Brnq%7Bvnoqusz%1Fn%19%7Bzntwqnwuwrluqqpwuw%7Bvp%1Fn%19%7Bunswspnpruutlvqzpsuqtwqt%1Fn%19%7B%7Bnss%7Brnotwsplrvt%7B%7Brrrpvwq%1Fn%19zpnvp%7Bnosrutplstwpr%7Btw%7Bpwq%1Fn%19vpnuwrnzszql%7Bptqs%7Bqstvp%1Fn%19trnprstnvrzpulpuqpquqzqzw%1Fn%19wunpqrtnsrt%7Bzltrpuspwrvr%7Bw%1Fn%19vrnusrnoquq%7Bwlvuwvvzpvsrt%1Fn%19svnquwpns%7Bvrvwlptuszptztrp%1Fn%19znvpssnqvu%7Bqlpz%7B%7Bwtwvs%7Bs%1Fn%19unwrqunuvz%7Bqls%7Buptssttwq%1Fn%19%7Bnqrqunosrqpvulpuw%7B%7Bqsppvt%1Fn%19ssnwpwrnswsrqtlpqtuszpspuz%1Fn%19svnptssnossusqslsuw%7Br%7Buvtt%1Fn%19swnszptnopvqupl%7Bwvpuqspzpqz%1Fn%19tnst%7Bznoqvuulptuz%7Bqrvvutz%1Fn%19snpzpvnwvrw%7Blupuz%7Bvpvtuvt%1Fn%19rnpwrrnosp%7Btr%1Fn%19rnqssznqpuwv%1Fn%19znsz%7Bpnoqusrwlv%7Bqrurvqqtt%1Fn%19ssnswwunozzt%7Blw%7Bwwquwtwq%7Bz%1Fn%19znsqzznoquwplvrz%7Bw%7Bwzzv%7Bqv%1Fn%19vnuzrnozwqqltzttw%7Bqwsztv%1Fn%19svznttno%7Bqr%7Blvpsrqvtp%7Bqzp%1Fn%19oss%7Bnq%7Bnopuul%7Bzprsqzrttv%7Brv%1Fn%19ossqnswwnswrz%1Fn%19o%7Btnwp%7Bnquwzltwqvzpp%7B%7Bpsq%1Fn%19o%7Brnsszznspwps%1Fn%19o%7Brnszwunsuq%7Bv%1Fn%19oztnpz%7Bunwvpq%7Blutvrsspztrv%1Fn%19oztnprrvnoptzv%7Blvtuqqsuuvrsq%1Fn%19o%7Brnprrrnosvv%1Fn%19o%7Bwnpzsqnqvqrrlwruwutvs%7Bqq%1Fn%19o%7Bznqursnw%7Bswrlq%7B%7Bppr%7Btz%7Bp%1Fn%19o%7B%7Bnpprwnowtruwlrtsspqvtprs%1Fn%19o%7Bvnsrrpnoszrzwlrwwwvqszptru%1Fn%19ostpnznowzvtzlzqvr%7Bsqqvw%1Fn%19ss%7Bnpstrnu%7Brsrl%7Bqustt%7Bwsuu%1Fn%19ssunsuz%7Bnosspzqlwpvv%7Bqurqs%7Bz%1Fn%19srpnqwszn%7Buqqplsrvqruzu%7Bzp%1Fn%19srpnvq%7Btntwtswlvvz%7Bvqrtwpq%1Fn%19%7Bunqts%7Bnovuzrplztzu%7Bvttwvw%1Fn%19%7Bwnpwsrnowrsrslututvqvtuvqt%1Fn%19%7Bznprprnosqzw%7Blp%7Bp%7Bsspwtqqp%1Fn%19%7Brnssrrnoprpvr%1Fn%19%7Brnsuztnsuswr%1Fn%19t%7Bnz%7B%7Bnoswswulrtptvvs%7Bqp%7Bz%1Fn%19ppnsqqnozpwrlrupvzvwqrrt%1Fn%19qtnsqunwvlvrwzzprqv%7Bvsuut%1Fn%19tsntrtnvzpzltwrwqtspp%7Brv%1Fn%19tqntpsnstulurwr%7Bzqspvzvpv%1Fn%19wwnqw%7Bnoqs%7Bzlssuwusqpppq%1Fn%19wunw%7Bvnt%7Buwlsztquuvqzpv%1Fn%19vznztrnqprqlrtvswu%7Bwzuwrw%1Fn%19wpnqvtnowztrlwrstzwrr%7Bwt%7B%1Fn%19wtnwvnoqswzlvtp%7Bsuqrtvww%1Fn%19ossunvrnoszulzp%7Busrsr%7B%7Bzpqq%1Fn%19o%7Bvnutun%7Bvuzl%7Bprp%7Bustvtwp%1Fn%19o%7Bvnzptnstwtlprz%7Bpvrsz%7Bvuw%1Fn%19o%7Brnuzsnosspw%1Fn%19o%7Brntvunosvuv%1Fn%19o%7Brnssrwn%7Btsz%1Fn%19oztnsvwunst%7Bpzl%7Btuzqtpptut%1Fn%19ozpns%7Bwrnsqvwtlpzspvurtru%7Bw%1Fn%19ozvnpvtqnpwptulwpzvwrwtpu%7B%1Fn%19ozrnqssqnqrqvzlzrwwuuzsvuwu%1Fn%19ou%7Bnprvrnoqpzpulvzutpzwsrqw%1Fn%19ouunpqwvnspwtulzvuwvzvrurrz%1Fn%19ozqnsqvvnopvvpzltvr%7Buuqvvtrq%1Fn%19ozsnsqvznzrlz%7Bv%7B%7Bqttvtptuv%1Fn%19ozwnqqwnossszzl%7Bwrusrvsrt%7Bt%1Fn%19o%7Brns%7Brnopqpr%1Fn%19o%7Bwnsrvnosrqwlwuusqquutsquw%1Fn%19o%7Bvnqzqnqtqulusv%7Bvpsrqruz%1Fn%19o%7Bvnvztnstwslpswtspzsquzv%1Fn%19o%7Brnvzwnost%1Fn%19stvn%7Bnopspwrlrzsw%7B%7Bzvqqpz%1Fn%19srsnpuqvnss%7Bszwltwtspsrpzpu%1Fn%19%7Btnstwtnoqrqwtluwwtpquvzupt%1Fn%19%7Bunv%7Brunpwwptrlvqu%7Bswzttt%1Fn%19%7Bvnqw%7Btnozrsvpluv%7B%7B%7Btv%7Brtw%1Fn%19%7Brnpwwtnovuzvr%1Fn%19%7Brnpzrrnsrpvz%1Fn%19zrnsztqnoqsvpul%7Bqwvpquw%7Bwvq%1Fn%19uwnsrqvnostpzulptwuts%7Bqzrtt%1Fn%19ospznqznosuuqqlpuwzq%7Bwrwu%7Bu%1Fn%19ospvnvtwntswzlpzswuzv%7Bpv%7Bq%1Fn%19osprnvuvnsvwlsprtq%7Bvt%7Bquqzz%1Fn%19ospvnqpznoswu%7Blpqsvwztwqppuw%1Fn%19ossunqq%7Bnsppl%7Bzquqzutpvzzvv%1Fn%19osrwnppznosptwlw%7Bvupsztrrvqs%1Fn%19v%7Bnvrnos%7B%7Bzlvtuvspu%7Bvssvs%1F%1Fntpntsnrnrnrnrnrnrn%2C7..nrnrnrnrnwn%2C7..nsn%2C7..n%2C7..nwnpn%2C7..n%19%60%24-!71%60n%60%24-!71%2B%2C%60n%60%24-!71-76%60n%60%24-!71%2B%2C%60n%60%24-!71-76%60n%60%24-!71%2B%2C%60n%60%2B%2C276%60n%60!*%23%2C%25'%60n%60%24-!71-76%60n%60%20.70%60n%60%24-!71%60n%60%24-!71%2B%2C%60n%60%24-!71-76%60n%60%24-!71%2B%2C%60n%602%2316'%60n%60%2B%2C276%60n%60!*%23%2C%25'%60n%60%24-!71-76%60n%601'.'!6%60n%60%24-!71%2B%2C%60n%60%24-!71-76%60n%60%20.70%60n%60%24-!71%60n%601'.'!6%60n%60%24-!71%2B%2C%60n%602%2316'%60n%60%2B%2C276%60n%60!*%23%2C%25'%60n%60%24-!71-76%60n%60%24-!71%2B%2C%60n%6017%20%2F%2B6%60%1Fnwnrnrnrnrnrnrnrnrnrnrnpnunqnqnznqnpnsnpnsunsunsn%19%19strqq%7Br%7Brzrzwnsrn%19sp%7Brnuqu%1F%1Fn%19psvnsrn%19spsznwwq%1F%1Fn%19vp%7Bnsrn%19tusnq%7Bz%1F%1Fn%19tuznsrn%19vzsnqzs%1F%1Fn%19%7Bsrnsrn%19wrpnqzv%1F%1Fn%19%7Bsvnpsn%19wrpnqzvn%60.%23%20'.l!*'!)%20-%3Ao%24%2B'.%26%1D%1D.%23%20'.%60%1F%1Fn%19%7Bpsnpsn%19wrpnqzvn%60%2B%2C276a0'%2F'%2F%20'0strqq%7Br%7Brwzvtl!*'!)%20-%3Ao%24%2B'.%26%1D%1D%2B%2C276%60%1F%1Fn%19sspznsrn%19wrznvwv%1F%1Fn%19zwrvnsrn%19wuznuwr%1F%1Fn%19zupsnsrn%19tvpnqtp%1F%1Fn%19z%7Bqznsrn%19trtnqpr%1F%1Fn%19%7Bprunpsn%19wuqnpuvn%60%2B%2C276a'%2F%23%2B.strqq%7Br%7Brwzvtl6'%3A6o%24%2B'.%26%1D%1D%2B%2C276l6'%3A6o%24%2B'.%26%1D%1D%2B%2C276oo.60l(1o1%2B%25%2C%2B%2Co.-%25%2B%2C%60%1F%1Fn%19%7Bpprnsrn%19wuqnpuq%1F%1Fn%19%7Bqprnprn%60%01-%2C60-.%60%1Fn%19%7Bvsunprn%604%60%1Fn%19%7Bvzunsrn%19wuvnpup%1F%1Fn%19%7Burwnsrn%19wu%7Bnvqs%1F%1Fn%19%7B%7Brpnprn%60%16%23%20%60%1Fn%19%7B%7Bqtnsrn%19wvrnt%7Bq%1F%1Fn%19srswpnsrn%19wvqnuwr%1F%1Fn%19swpswnsrn%19wztnuqz%1F%1Fn%19swvqsnsrn%19w%7Bvnqzp%1F%1Fn%19swusqnsrn%19w%7Bvnqzt%1F%1Fn%19sw%7Bqrnsrn%19tqvnvvs%1F%1Fn%19stsvtnsrn%19tqznvts%1F%1Fn%19stqu%7Bnsrn%19tqrnvvp%1F%1Fn%19stv%7Bqnpsn%19tqrnvvpn%60%20766-%2Cl%206%2Cl%206%2Coo%20.-!)%60%1F%1F%1Fnztn%60%0F-8%2B..%23mwlrbj%15%2B%2C%26-51b%0C%16bsrlryb%15%2B%2Ctvyb%3Atvyb04xzplrkb%05'!)-mprsrrsrsb%04%2B0'%24-%3Amzplr%60n%60'%2Co%17%11%60npvnrnvnosprnsnsnsnrnrn%60%15%2B%2C%26-51b%0C%16bsrlryb%15%2B%2Ctvyb%3Atv%60n%60%15%2B%2Cqp%60n607'n%24%23.1'n%2C7..n%24%23.1'n%24%23.1'n%24%23.1'n%24%23.1'n%19rn%24%23.1'n%24%23.1'%1Fn%24%23.1'n%19swqtnztv%1Fn%19swqtnzpv%1Fnsn%19%1Fn%19%1Fn607'n%19%24%23.1'n%24%23.1'%1F%1F

Do any of you have a suggestion how to decode it further and / or what is the algorithm / hashing function / whatever that is?

Also thought about looking into sources of mobile (Android) app to see how is this string generated, but so far was not able to decompile it into human-readable code.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.