Skip to content

Payment Status Issues

Remco Tolsma edited this page Oct 7, 2016 · 1 revision

Ingenico/Ogone

curl --request POST --data "NCERROR=0&PAYID=123456&ORDERID=123456&STATUS=test" --dump-header - --silent --output /dev/null --user-agent "Mozilla/3.0 (compatible; Indy Library)" "http://example.com/"

Turns out, after a little investigation, the Indy Library user-agent actually belongs to a Delphi/C++ Builder suite of tools for doing internet stuff - therefore, someone has written the spambot that I've noticed here in Delphi or C++ Builder and used this library. If you see little individual hits from something describing itself as Indy Library it could be some innocent application. Developers who use the Indy Library for legitimate reasons should really change the User Agent that their software sends when making HTTP requests, to avoid being tarred with the same brush.

Source: http://www.flarp.net/misc/indylib.php

OmniKassa

curl --request POST --data "Data=test&Seal=test&InterfaceVersion=HP_1.0" --dump-header - --silent --output /dev/null --user-agent "Java/1.8.0_25" "http://example.com/"

Clone this wiki locally