Ring Referral Abuser

This was a project made by me to easily spoof referrals to your ring account.

Getting Started

To use this you need to find your referrerId, inviteCode, and referrerLink. to find these you will need to use a network tracker such as Charles Proxy or Burp suite and grab the request when clicking your referrering link. What you need to do is simple as this.

Method 1.

Step 1. Create a ring account in the neighbors app.

Step 2. Head over to the referral section.

Step 3. Copy the link and and paste it into wherever you can trace the response.

Step 4. Once you examine the response you will find something that looks like this:

  "session_id" : "615809008687086307",
  "identity" : "youremail@here.com",
  "data" : "{"referrer_id":16372942,"~creation_source":0,"+click_timestamp":1548058666,"$identity_id":13311921,"$ios_passive_deepview":"ring_video_doorbell_deepview_qlxb","~feature":"referral","+match_guaranteed":true,"+clicked_branch_link":true,"$one_time_use":false,"~id":"615809209824759391","+is_first_session":true,"~referring_link":"https://download.ring.com/nSuwYXw/%22,/%22invite_code/%22:/%22dc175e8bce/%22%7D",
  "device_fingerprint_id" : "615809008687086307",
    "identity_id" : "615809008687086307",
  "link" : "https://download.ring.com/a/key_live_fiAFgsbsLJpNm7gHksC6BgcfwxcJI44h?%24identity_id=615809008687086307"
}

From there you will now have all the necessary parts to make this work.

Step 5. Profit???

Method 2

Step 1. If you have a jailbroken phone this is the easier method.

Step 2. Once you have your jailbroken phone, install the package Flexible from cydia.

Step 3. Enable Flexible for the Ring Neighbors app and inside the Neighbors app enable "Network History".

Step 4. Once you have Network History enabled, go to where your referral data is for the first time, then restart the app. At launch it will send a request for your referral data, click on the request in network history called "Referral". You will see something similar to this:

  "session_id" : "615809008687086307",
  "identity" : "youremail@here.com",
  "data" : "{"referrer_id":16372942,"~creation_source":0,"+click_timestamp":1548058666,"$identity_id":13311921,"$ios_passive_deepview":"ring_video_doorbell_deepview_qlxb","~feature":"referral","+match_guaranteed":true,"+clicked_branch_link":true,"$one_time_use":false,"~id":"615809209824759391","+is_first_session":true,"~referring_link":"https://download.ring.com/nSuwYXw/%22,/%22invite_code/%22:/%22dc175e8bce/%22%7D",
  "device_fingerprint_id" : "615809008687086307",
    "identity_id" : "615809008687086307",
  "link" : "https://download.ring.com/a/key_live_fiAFgsbsLJpNm7gHksC6BgcfwxcJI44h?%24identity_id=615809008687086307"
}

Step 5. Profit???

Prerequisites

Before you use this you must need:

Python 2.7-3.7 on any operating system.
Pip

Getting Started

To use this Just simply run

pip install requirements.txt
python rra.py

and enter valid credentials (referrerId, inviteCode, and referringLink)

Authors

• Padraig Marks - Initial work - Ring Exploit
• Mustafa (exofeel) - Port to Py3 - Mustafas work
• Niro(7331#1337) - Initial work - Ring Exploit

Special thanks to triggered.pdf and nova for being my test dummies in the PoC of this exploit.

Disclaimer

This has been submitted and fixed by Ring along with their referral system being shut down.