Thank you for the share

SSL won’t help you with people who brute attack for MAC accounts.

mido_bashamoot said:

Hello Guys,

Recently a lot of people talk about bugs and exploits today i will show you guys simple steps how to protect your mag lines from being re-stream.

No quote

Hope this help.

Click to expand...

Better advise would be to change mac address to the one which doesn't start with 00:1A:79...

Thank you for the share

JackFack said:

Better advise would be to change mac address to the one which doesn't start with 00:1A:79...

Click to expand...

Is true, but that is the MAC identifier schema used by MAGs etc.

Disable emulator option and no one can enter unauthorised even with valid MAC address.
With temporary link to url's even can forget.
SSL will make harder to sniff traffic.

Thsnkz, i will try this

If you enable ssl older mags won't work. 254 or 250 don't work. Neither by m3u most of apps also won't work
.

obscuremind said:

If you enable ssl older mags won't work. 254 or 250 don't work. Neither by m3u most of apps also won't work
.

Click to expand...

250/254 work without any problem on SSL check your settings.

thx anyone test it ? work it for protect mag devices?

doc said:

Disable emulator option and no one can enter unauthorised even with valid MAC address.
With temporary link to url's even can forget.
SSL will make harder to sniff traffic.

Click to expand...

Not really and the issue isn’t a matter of sniffing traffic, it’s brute attacks.


Also, you can make pretty much ALL connections use SSL with proper configurations. However, on that same note, you’re essentially making the strength of the SSL cryptogram weaker and weaker to expanded the compatibility. With that said, along with my previous point, SSL is essentially moot and purely a cosmetic effect with a slight advantage to make the traffic “not so clear.”

urgodfather said:

Not really and the issue isn’t a matter of sniffing traffic, it’s brute attacks.

Click to expand...

bruteforce only mak address cannot be connected with ident of box aka serial number


simple file2ban can help hacker to watch F*U video

doc said:

bruteforce only mak address cannot be connected with ident of box aka serial number

simple file2ban can help hacker to watch F*U video

Click to expand...

have you configured file2ban ?

lisitech said:

have you configured file2ban ?

Click to expand...

Only way is to enable isp lock to all Mag/Tvip's/Gstb emulators ...

if u use xtreamui just edit portal.php and never can sniff your token or mac address just add 1 line with allow only local address couse when customer make request to xtreamui request accept and forwoad request to portal.php onother problem is xtreamui have a many backdoors in the code u can decrypt and check it most of backdoors send your streams to diffrent servers

portal.php
coded
how
arrangement
makes
detail
can you write

Hi Guys,

how to can the MAG line connect to the streams, because if i add a ne MAG, a line for the this MAG will be created.
The connection to this line will alwas refused, i have try it VLC Player. Also I try IPTV Checker tools and the channels will be show as offline.

So how does it possible ?

redhat said:

Hi Guys,

how to can the MAG line connect to the streams, because if i add a ne MAG, a line for the this MAG will be created.
The connection to this line will alwas refused, i have try it VLC Player. Also I try IPTV Checker tools and the channels will be show as offline.

So how does it possible ?

Click to expand...

by using another player, it's working direct even if MAG Security = enabled
the player name in your pm, not safe to post it on public

akawi11 said:

by using another player, it's working direct even if MAG Security = enabled
the player name in your pm, not safe to post it on public

Click to expand...

Mate wich PM? I didn’t receive any PM yet ?