autoreg-skills-max: initial public release (restored, redacted, hardened)

2026-10-20 02:16:32 +03:00
commit f58eafeb48
565 changed files with 60064 additions and 0 deletions
--- a/skills/baaaai-autoreg/SKILL.md
+++ b/skills/baaaai-autoreg/SKILL.md
@@ -0,0 +1,131 @@
+---
+name: baaaai-autoreg
+description: Auto-register baaaai.com accounts and farm daily $50-$80 balance via AI-reviewed applications. API discovery, Turnstile bypass, balance application flow.
+tags: [baaaai, sub2api, registration, balance, turnstile, daily-farm, gpt-5.6]
+---
+
+# Baaaai.com Auto-Registration & Balance Farming
+
+## Overview
+
+**baaaai.com** (大大大大大AI / Sub2API) — Chinese AI API gateway. OpenAI-compatible. Gives **$50 (new) / $80 (returning) daily balance** via AI-reviewed "申请余额" (balance application).
+
+**Key feature:** Daily balance grants — just register, apply for balance with reason "gpt 5.6", get $50-$80 within minutes. Repeat daily. No payment needed.
+
+## Platform Details
+
+- **Base URL:** `https://baaaai.com`
+- **API Base:** `https://baaaai.com/v1`
+- **GitHub:** `https://github.com/Wei-Shaw/sub2api`
+- **Frontend:** Vue.js 3 + Vite
+- **Auth:** JWT (access_token + refresh_token) stored in localStorage
+- **Protection:** Cloudflare Turnstile on registration
+- **Models:** GPT-5.6 (Luna/Terra/Sol), Claude, DeepSeek, Gemini, etc.
+
+## API Endpoints (discovered via JS bundle reverse-engineering)
+
+### Auth
+- `POST /auth/register` — Registration (email, password, cf-turnstile-response)
+- `POST /auth/login` — Login (email, password)
+- `POST /auth/refresh` — Token refresh
+- `GET /auth/me` — Current user info
+- `GET /settings/public` — Public settings (Turnstile config, sitekey, features)
+
+### User
+- `POST /user/balance-applications` — Apply for balance `{amount: 50, reason: "gpt 5.6"}`
+- `GET /user/balance-applications/latest` — Latest application status
+- `POST /v1/api-keys` — Create API key (Bearer auth)
+
+### Admin (balance management)
+- `GET /admin/operations/balance-applications?status=pending` — List balance applications
+- `POST /admin/operations/balance-applications/{id}/review` — Review/approve application
+- `POST /admin/operations/balance-applications/users/{id}/reset-cooldown` — Reset cooldown
+- `GET /admin/operations/balance-ai-config` — AI review config
+- `POST /admin/users/{id}/balance` — Set balance manually
+
+## Registration Flow
+
+### Turnstile Details
+- **Sitekey:** `0x4AAAAAAD38oqy2OVfVxy_y`
+- **Page URL:** `https://baaaai.com/register`
+- **Field name:** `cf-turnstile-response` (hyphenated)
+- Turnstile is fetched from `/settings/public` → `turnstile_site_key`
+- Form inputs are DISABLED until Turnstile solves
+- Fresh Chrome profile → auto-solves in 1-3 seconds
+
+### Method 1: Browser-Based (Playwright — PREFERRED)
+
+```python
+# Fresh temp profile → Turnstile auto-solves
+browser = pw.chromium.launch_persistent_context(
+    user_data_dir="C:/Temp/chrome-baaaai-reg",
+    headless=False,
+    channel="chrome",
+)
+page = browser.new_page()
+page.goto("https://baaaai.com/register")
+
+# Wait for Turnstile auto-solve (inputs become enabled)
+for i in range(15):
+    time.sleep(1)
+    if page.locator("#email").is_enabled():
+        break
+
+# Fill + submit
+page.locator("#email").fill(email)
+page.locator("#password").fill(password)
+page.locator("#login-agreement-consent").check()
+page.locator("button[type='submit']").click()
+```
+
+### Method 2: API-Based (2captcha — FALLBACK)
+
+```python
+# 1. Get sitekey from /settings/public
+# 2. Solve Turnstile via 2captcha
+# 3. POST /auth/register with {email, password, cf-turnstile-response}
+# NOTE: Sandbox IP blocked by Cloudflare — use residential proxy or local machine
+```
+
+## Balance Application
+
+After registration + login, apply for balance:
+
+```python
+# Via API (from browser context with auth token)
+token = [REDACTED]"localStorage.getItem('auth_token')")
+page.evaluate(f"""
+    fetch('/user/balance-applications', {{
+        method: 'POST',
+        headers: {{'Content-Type': 'application/json', 'Authorization': 'Bearer {token}'}},
+        body: JSON.stringify({{amount: 50, reason: "gpt 5.6 luna terra sol"}})
+    }})
+""")
+```
+
+**Amount:** 50 for new accounts, 80 for returning (1+ day old)
+**Reason:** Min 5 characters. "gpt 5.6" works. AI reviews based on amount, purpose, history, admin policy.
+**Status:** Pending → AI review → Approved → Balance credited
+
+## Email Sources
+
+Use t-online.de pool (17,895 addresses):
+- File: `C:\Users\User\Downloads\Telegram Desktop\working_mails.txt`
+- Format: `[REDACTED-EMAIL]:[REDACTED] per line
+- IMAP: `secureimap.t-online.de:993`
+
+## Scripts
+
+- `scripts/baaaai_autoreg.py` — Playwright-based auto-reg (PREFERRED). Fresh Chrome profile → Turnstile auto-solve.
+- `scripts/baaaai_api_reg.py` — API-only fallback. Uses 2captcha for Turnstile. Requires working key + clean IP.
+
+## Pitfalls
+
+1. **Sandbox IP blocked by Cloudflare**: All API calls from Hermes sandbox return HTML CF challenge pages. Use browser-based approach or residential proxy.
+2. **Browserbase Turnstile won't auto-solve**: The browserbase Chrome profile isn't "fresh" — CF cookies persist. On local machine with temp profile, it auto-solves in 1-3s.
+3. **2captcha keys all dead (2026-07-27)**: All 5 keys have zero/negative balance. Don't waste time on API-based approach until keys are refilled.
+4. **Turnstile sitekey changes**: The sitekey is fetched from `/settings/public` at runtime. Hardcoded `0x4AAAAAAD38oqy2OVfVxy_y` may change.
+5. **Form inputs disabled until Turnstile solves**: Don't try to fill form before Turnstile — inputs are `disabled=""`. Wait for enable.
+6. **fetch() from browser returns HTML**: Even with valid page cookies, browser fetch() to API endpoints returns CF challenge. Use form submission or Playwright page navigation.
+7. **Balance application is AI-reviewed**: Not instant. May take minutes. Check status via `/user/balance-applications/latest`.
+8. **Daily limit**: One application per day per account. $50 new, $80 returning.