tejado / ebk-client

eBay Kleinanzeigen/Classifieds API client
MIT License
98 stars 18 forks source link

trouble finding login credentials for api #20

Open nosfirlabs opened 2 years ago

nosfirlabs commented 2 years ago

I have decompiled the latest ebay kleinanzeigen apk and gone through the described steps, but i have trouble to find the username and password field variables in the code. they seem to have changed something. could anyone give a hint where to find them nowadays or maybe share them?

derlucas commented 2 years ago

At least in the Version v12.20.0 (from apkpure) the credentials are in there. Look for Api Configuration class

Vanderhoof commented 2 years ago

In v13 the creds are also present. But my user got banned right after logging in via api. So better create a fake account for these experiments

Quesstor commented 2 years ago

In v13 the creds are also present. But my user got banned right after logging in via api. So better create a fake account for these experiments

Do you mean banned, like not being able to login anymore or just a Email that the password got reset by kleinanzeigen? The german version of the mail: "uns sind ungewöhnliche Aktivitäten in deinem Benutzerkonto aufgefallen. Wir haben daher dein Passwort zurückgesetzt, um dein Konto vor möglichem Missbrauch zu schützen. "

Vanderhoof commented 2 years ago

@Quesstor I didn't even receive any email:

After that I tried to log in on the website with my user credentials and it said my login or password is incorrect. Then I tried to reset password and it said "User account restricted" ("Nutzerkonto eingeschränkt").

Now even connecting to api with EbkClient(<api creds, user creds>) gives me 401 error, so I guess my user was banned right away.

Gerttul commented 7 months ago

@Vanderhoof Hey, would you share how you found the login credentials?Under which String are they? Thanks :)

wadid commented 1 month ago

@Vanderhoof @Gerttul Did anybody of you have success or do you still get blocked?

Vanderhoof commented 1 month ago

@wadid I didn't try anymore, I resorted to parsing the pages HTML anonymously. But about a year ago that stopped working also: they are blocking your IP if you request a specific page too often. I guess they started a war on bots, can't blame them : }