PyCosmos



PyCosmos


A Python script for sending SMS using MyCosmos




Download latest version
Visit project page in SF.net

UPDATE: A new version based on httplib and Qt is now been maintained by dkarnout here.

This script allows sending SMS using the MyCosmos portal of COSMOTE in Greece.

The MyCosmos portal uses the MS Outlook Web Access web application, which is rather IE-oriented. Moreover, it uses a bunch of JScripts that runs locally on browser and initially (until a few weeks ago) the SMS option was not accessible directly in other (i.e. Firefox) browsers.

In an effort to create an automated script that would allow a MyCosmos user to bypass all this bloat and easily send a SMS, I found out that the authentication system having been used to allow sending of SMS through MyCosmos portal did not use the Session Cookie but a "SecureHash" calculated by the mobile number, a salt string and the current year. This is no reverse engineering; the whole code was open and executed in Internet Explorer browser through vw_navbar.js.

Therefore, it was possible to send an SMS by just providing a COSMOTE mobile number that has activated the MyCosmos portal. :) Most users were already aware of such a security bypass, by bookmarking the SMS sending webpage in order to use it in Firefox.

Recently, COSMOTE changed the authentication system (just before the initial release of PyCosmos 0.31), taking under consideration the Session cookie. PyCosmos 0.4 was born, using the new authentication system of MyCosmos portal, and now requiring username and password to work. Nevertheless, it seems that some software engineers back in MyCosmos really loved the old (no-)authentication system, and still love it, so PyCosmos 0.31 is dedicated to them :-)

The script uses the httplib2, which can be found in http://bitworking.org/projects/httplib2/

The binaries are indepedent; you can distribute and use either separately. For the Windows graphical version, you need the GTK runtime, which you can get from http://gladewin32.sourceforge.net/. Python source scripts are cross-platform (tested on Linux and Windows Python 2.4).

BIG FAT DISCLAIMER
------------------
You are not supposed to use this software for sending short messages using MyCosmos accounts you do not own personally. The author of this software shall not be held responsible for damages or illegal activities caused by the wrong use of this software.

You can email the author at sakis.at.users.dot.sourceforge.dot.net