SpotCheck v0.4-Stable

Whats is SpotCheck?

SpotCheck is an account checker for the Spotify stream music service written in Python 2.7. SpotCheck manages to evade the Spotify security system that prevents the check of accounts massively. The Spotify security system is simply a CSRF token, a system implemented by many pages to avoid checking accounts on theirs platform but this security system is not very secure. Not enough for a company like Spotify. SpotCheck is a challenge between friends and with the intention of educating so it should not be used to commit any type of crime that will be committed under the responsibility of the user of the program not the creator of the same.

How does its works?

Obviously with some magic and a bit of Matrix shit. Nah just kidding.
SpotCheck uses as a main base the module of requests to make requests to different parts of Spotify. The first thing you get is the CSRF token which is obtained at accounts.spotify.com for later use in the login API hosted at accounts.spotify.com/api/login with the username, password, etc ... Depending on the parameters of the API response the user and password will be correct or incorrect. If they are correct, a request will be created to spotify.com/de/account/overview/ to get more information about the account.

Installation

Install python-pip and run this command from the SpotCheck directory

pip install -r requeriments.txt

Help Message

usage: SpotCheck.py [-h] [--output_type OUTPUT_TYPE] [--threads THREADS]
                    [--nothreads]
                    combo_list output_file_name

positional arguments:
  combo_list            The combo list is a list with users and passwords in a
                        'username:password' format.
  output_file_name      Only the name of the file. The extension will be
                        determined by the type of output selected.

optional arguments:
  -h, --help            show this help message and exit
  --output_type OUTPUT_TYPE
                        The output type can be: txt, json, xml and html
                        (Default: txt).
  --threads THREADS     Number of workers that SpotCheck uses (A very high
                        number can cause an error in the program due to the
                        limitations of your computer) (Default: 4).
  --nothreads           If this argument is specified, SpotCheck will not
                        create any thread, otherwise the main SpotCheck
                        process will perform the checks.

Changelog

13/09/2018 v0.1-Beta

 Creation of the project.

14/09/2018 v0.2-Beta

Builded a new system for the CSRF acquisition.

09/10/2018 v0.3-Stable

Incremented the speed (Threads calculate).
Progress Bar added (Only-MultiThread).

05/12/2018 v0.4-Beta

Changed the main language to English.
Renewed the code of SpotCheck.py.
Progress Bar added to the --nothread argument.
Removed the threads calculate.
Added account info system (Now you can get the type of the account, country and if is the admin of a Family Premium account too).
Added different types of outputs (txt, json, xml, html).

09/12/2018 v0.4-Stable

Fixed SSL error.
Now if you kill the program with Ctrl+C the alredy checked accounts will going to be saved.
If you check a large account list and you are running SpotCheck with Python 32 bits you can have memory errors caused by the Python memory limit. (Just run the .exe in releases).

MrSentex / SpotCheck

readme