Pisowifi ghost coin exploit, no hulog häçk.

[NzD4rkS3c]

In Piso wifis there is this bug they so called "ghost coins" many builders thought that this is just an issue on power supply and that's true in some cases but most of them aren't aware.. this also occured because they use the ESP8266 / NODEMCU as sub vendo...

How this happened?

ESP8266 has very small memory size (under 1mb).. so it's easy to purposely crash it.. by crashing.. it triggers BOD (brownout reset) and also current spikes (sudden voltage rise) since it is connected to coinslot it could trigger "false coin pulse" when coinslot is open or active.. while it crashed and that's what i did in the video.. i wrote a script that automatically press the insert coin btn to subvendo then crash/generate spikes via http packets towards sub vendo...

Possible fixes is proper power management for esp8266 or just use other chip like orangepi or raspberry.

(I don't know electrical things)

does this possible to trigger on orangepi / raspberry pi based? yes but only if has sub vendo or multi coinslot cuz you can make the other vendos handle the "false coin pulse"

This was posted for awareness..

Video Proof of Concept on LPB pisowifi with subvendo (PoC): You do not have permission to view the full content of this post. Log in or register now.

Screenshot:

(Btw I accept donations XD)

Tested against: LPB, PisoFi, ADO

 

[Hatchfile]

kahit po ba dirooted to ts?

 

[NzD4rkS3c]

kahit po ba dirooted to ts?

yes, kahit di rooted basta android

 

[Hatchfile]

yes, kahit di rooted basta android

pano gagawin ts?

 

[IMSHY01]

pa try boss,donate ako hehe

 

[Merkats]

Thanks fo sharing

 

[super_ace]

Saan script bro

 

[Kene Seu]

for sale ba to boss? o free for sharing?

 

[Arjienx]

You do not have permission to view the full content of this post. Log in or register now.

need yata vulnerable sa cricket yung coinslot + esp para sa ganito. regardless of pisowifi systems.

 

[copyrightneta]

Panu po scripts ?

 

[NzD4rkS3c]

[Hidden content]
need yata vulnerable sa cricket yung coinslot + esp para sa ganito. regardless of pisowifi systems.

oo parang cricket lighter pero remotely.. di need na vulnerable sa cricket kasi ung iba plastic naman coinslot.. as long as ung pins ng coinslot connected sa esp tyaka naka multi coinslot / subvendo malaki chance na gagana ung exploit.. kaya need naka insert.. para active ung coinslot plus para mainform ung ibang vendo (main) na may nagiinsert coin so para pag nagtrigger ng voltage spike ung exploit... mapupunta dun sa naginsert coin ung false coinslot pulse..

possible sya sa raspberry pi / orangepis pag may subvendo pero mahirap maachieve kasi malaki ram nun.. mahirap magtrigger ng sudden restart/blackout...

for sale ba to boss? o free for sharing?

free lang naman, pero not open to public ung script... baka may mga bata or something.. tas nanakawin then ibebenta lang... nanjan narin naman ung concept so.. if skilled enough kaya nila yan gawan on their own...

may for sale things ako pero pricy, or not worth selling talaga.. some of them RCE may no hulog din.. pero para sa sarili ko lang.. malulugi mga devs / builders..

(sa mga pisowifi builders jan.. mahirap lang ako kaya nangheheck lol, I'm currently at second year tyaka need ku bumili ng laptop kaya todo tipid.)

 

[Jhaytavz]

Pano gawen to ts paturo

 

[Rastafries420]

for clout pala to

 

[kitoycastanares]

pabulong po hehe willing to donate here if gumana d2

 

[JameSerzxc]

Nag share ka pero di mo nmn nilapag script ano yan nakaw vids mo lang

 

[Enchiiiiic]

pa bulong ts . Salamat

 

[Gwapo_2_0]

pabulong

NzD4rkS3c​

e test ko po sa vendo ko

 

[PHC - baue]

boss penge script :>

 

[GinTaMad]

astig nito TS
kailan kaya ma-release hehe

 

[rushichin]

Extremely interested po since, recently learning to use termux and ewan gusto ko to ma try