If you have a MMS capable phone, you can send unlimited free sms to anyone using mero mobile by using the following technique... Note that MMS to email service should exist on your phone.
Activate Mero Mobile MMS Service if you have not already done so by calling 9005 and asking them to send MMS settings for your particular mobile phone. Then send an SMS to 900226 with message 'a'. Then you will have MMS activated in your Mobile Phone.
Then just compose a MMS Text message and instead of sending it to a phone number like 9801234567 send it to email address 9779801234567@sms.spicenepal.com and your target.
Note that you will be able to send MMS text only via this method.
This is only free till the Mero MMS is free, i.e. till Kartik 24, I think...
Thursday, November 1, 2007
Thursday, October 25, 2007
Message Bombing Mero Mobile Users
This one is about how you can annoy your friends by sending 100s of SMS messages to any customer using Mero Mobile. This one isn't difficult either. Just log in to http://www.spicenepal.com and then goto Sending SMS page. Then in the To field, type in the phone number of your victim eg. 9801234567 and then give a comma (,) and then type in then number again. This will look like 9801234567,9801234567. If you send this SMS, the person with number 9801234567 will get two similar SMS messages from +555. If you continue typing in the same number followed by a comma, which will look like 9801234567,9801234567,9801234567,9801234567,9801234567,9801234567,9801234567,9801234567,9801234567,9801234567, the persom will get more and more messages. But this trick has a limitation, more than about 70 entries will result in some error. You can however, go back and click send again to send more of them. If you continue this several times, the person will get 100s of messages. After sending about 200-300 messages, you will get some server error and SMS sending will be halted for a while.
This trick has another drawback. Your phone number will be sent along with the message to this person, so he may take legal actions against you. So be cautioned while doing this. There is another method which is anonymous. I will discuss that later.
This trick has another drawback. Your phone number will be sent along with the message to this person, so he may take legal actions against you. So be cautioned while doing this. There is another method which is anonymous. I will discuss that later.
Send Longer Web SMS Message via SpiceNepal.com WebSMS v2
In the last blog, I talked about sending SMSes longer than 160 characters. They could be upto 235 characters. But if that is not enough for you, we have another workaround, which allows you to send text messages of almost any length to any friend who has a mero mobile.
And this can be done by email2SMS service provided by Spicenepal. Login to your email account in any free email provider (Yahoo!, Gmail or anything) and then compose a mail to 977980xxxxxxx@sms.spicenepal.com and the email will reach to the person with the number 980xxxxxxx with sender MeroEmail and your email ID and subject will also be included in the SMS.
If you don't want to include your email address and want to be completely anonymous, you can try the SMS service at http://merosms.atwebpages.com . Also, this way it is very quick and you don't need to sign in to your Email Provider and then compose and do a lot. So, this can be better. Moreover, if you want to send quick messages via GPRS, you can try this service. The page for your mobile phone is short and sweet without much info so as to reduce your data up-down and is available at http://merosms.atwebpages.com/wap.php> . If your browser is does not support direct html content and shows error opening http://merosms.atwebpages.com then you can try this link http://wap.google.com/gwt/n?u=http://merosms.atwebpages.com/wap.php which will open successfully for sure in any mobile phone that has GPRS.
And this can be done by email2SMS service provided by Spicenepal. Login to your email account in any free email provider (Yahoo!, Gmail or anything) and then compose a mail to 977980xxxxxxx@sms.spicenepal.com and the email will reach to the person with the number 980xxxxxxx with sender MeroEmail and your email ID and subject will also be included in the SMS.
If you don't want to include your email address and want to be completely anonymous, you can try the SMS service at http://merosms.atwebpages.com . Also, this way it is very quick and you don't need to sign in to your Email Provider and then compose and do a lot. So, this can be better. Moreover, if you want to send quick messages via GPRS, you can try this service. The page for your mobile phone is short and sweet without much info so as to reduce your data up-down and is available at http://merosms.atwebpages.com/wap.php> . If your browser is does not support direct html content and shows error opening http://merosms.atwebpages.com then you can try this link http://wap.google.com/gwt/n?u=http://merosms.atwebpages.com/wap.php which will open successfully for sure in any mobile phone that has GPRS.
Send Longer Web SMS Message via SpiceNepal.com WebSMS
Mero Mobile is one of the two GSM service providers in Nepal. It is run by Spicenepal, Krishna Tower, Baneshwor, Kathmandu, Nepal. This blog has been started to educate people about what kind of flaws can exist in a system and how they can be exploited. Some flaws can be may not be realized as a flaw but it can be exploited to harm someone.
Mero mobile seems to have flaws because the main programming of pages has been done in Javascript (which is client side scripting) so by editing the javascript many things can be changed.
Like for example, if you type a message of length more than 160 characters, you get an error saying that you cannot type in more than 160 characters. However, this check has been done in javascript hence can be modified to increase the characters allowed. I have successfully sent messages with about 250 characters. This can be done by changing the 160 to 235 in the spicenepal page. This change can be brought about either by installing programs such as Proxomitron and configuring them to change 160 in the such pages or by saving the page offline, editing it and opening it after logging in.
Lets discuss these methods in details. Use any one of these methods.
Method 1: Using Proxomitron
---------------------------
01. Download Windows Version of Proxomitron from http://www.geocities.com/khattam_khattam/proxo.zip . For other operating systems, please Google.
02. Extract it to some place such as c:\proxomitron using WinZIP from http://www.winzip.com or WinRAR from http://www.rarlab.com or use the WinXP or Vista default zip handler.
03. Run the proxomitron. It will be available at the system tray in the lower right corner of your desktop. Click it to see the program.
04. Click on the "Web Page" button.
05. Click on new.
06. In the filter name, type in any name. I choose "Mero SMS 235 Chars"
07. In the url match, enter http://
08. In the Matching Expression, type in "160".
09. In the Replacement Text, type in "235".
10. Click OK.
11. Tick next to "Mero SMS 235 Chars" in the list that appears to enable it.
12. Click on "Apply" then "OK". And then close the proxomitron dialog.
13. Now, open up Firefox. If you don't have it download it. It is the best web browser and is secure and a lot better than the old Internet explorer.
14. Click on Tools>Options>Network>Settings>Manual Proxy Configuration.
15. Enter "localhost" without quotes in HTTP Ptoxy field and "8080" without quotes in the Port field.
16. Click OK>OK to close all the dialogs.
17. Now open http://www.spicenepal.com and then login and when you reach the "Sending SMS" page, you'll see that you're now able to send messages upto 235 characters.
Method 2: Manually Editing the Page
-----------------------------------
01. Login to http://www.spicenepal.com and then go to the sms sending page via Mozilla Firefox.
02. Click on View>Page Source and save the page source. I saved it as "mero.html" in the Desktop.
03. Then open the mero.html in Notepad and find all the "160" (without quotes) in the page and change them to 235 and save the file.
04. Now, login to http://www.spicenepal.com and without logging out, open the file you have saved earlier in Firefox and then type in message of length upto 235 characters. It works. To send another message, simply go back and repeat.
Thats all for now. See you all later.
Mero mobile seems to have flaws because the main programming of pages has been done in Javascript (which is client side scripting) so by editing the javascript many things can be changed.
Like for example, if you type a message of length more than 160 characters, you get an error saying that you cannot type in more than 160 characters. However, this check has been done in javascript hence can be modified to increase the characters allowed. I have successfully sent messages with about 250 characters. This can be done by changing the 160 to 235 in the spicenepal page. This change can be brought about either by installing programs such as Proxomitron and configuring them to change 160 in the such pages or by saving the page offline, editing it and opening it after logging in.
Lets discuss these methods in details. Use any one of these methods.
Method 1: Using Proxomitron
---------------------------
01. Download Windows Version of Proxomitron from http://www.geocities.com/khattam_khattam/proxo.zip . For other operating systems, please Google.
02. Extract it to some place such as c:\proxomitron using WinZIP from http://www.winzip.com or WinRAR from http://www.rarlab.com or use the WinXP or Vista default zip handler.
03. Run the proxomitron. It will be available at the system tray in the lower right corner of your desktop. Click it to see the program.
04. Click on the "Web Page" button.
05. Click on new.
06. In the filter name, type in any name. I choose "Mero SMS 235 Chars"
07. In the url match, enter http://
08. In the Matching Expression, type in "160".
09. In the Replacement Text, type in "235".
10. Click OK.
11. Tick next to "Mero SMS 235 Chars" in the list that appears to enable it.
12. Click on "Apply" then "OK". And then close the proxomitron dialog.
13. Now, open up Firefox. If you don't have it download it. It is the best web browser and is secure and a lot better than the old Internet explorer.
14. Click on Tools>Options>Network>Settings>Manual Proxy Configuration.
15. Enter "localhost" without quotes in HTTP Ptoxy field and "8080" without quotes in the Port field.
16. Click OK>OK to close all the dialogs.
17. Now open http://www.spicenepal.com and then login and when you reach the "Sending SMS" page, you'll see that you're now able to send messages upto 235 characters.
Method 2: Manually Editing the Page
-----------------------------------
01. Login to http://www.spicenepal.com and then go to the sms sending page via Mozilla Firefox.
02. Click on View>Page Source and save the page source. I saved it as "mero.html" in the Desktop.
03. Then open the mero.html in Notepad and find all the "160" (without quotes) in the page and change them to 235 and save the file.
04. Now, login to http://www.spicenepal.com and without logging out, open the file you have saved earlier in Firefox and then type in message of length upto 235 characters. It works. To send another message, simply go back and repeat.
Thats all for now. See you all later.
Subscribe to:
Posts (Atom)