jmmy9609-design/gpt-pp

This repository is a gateway tool that intercepts and extracts PayPal authorization links from Stripe Hosted Checkout sessions. The core idea is a "zero-amount" validation logic: the gateway only allows sessions through that match a zero-amount rule, and it blocks anything that deviates from that pattern. The authors describe the intended use as security auditing, network protocol analysis, and payment interface research. The project has two server implementations. The Python version handles the web dashboard, JWT token extraction, proxy preflight checks, and gateway state management. The Go version is built for higher throughput when handling large numbers of concurrent transactions at once. Both are included in the same repository and can be run independently or together depending on load requirements. A background scheduler rotates residential proxy IP addresses across multiple regions, automatically switching to a fresh IP when a connection fails or gets blocked. Browser automation is handled through Playwright with a headless Chromium instance, using a library called curl-cffi that mimics browser TLS fingerprints to make automated requests look more like traffic from a real browser. Setup is automated by startup scripts for both macOS and Linux (start.sh) and Windows (start.bat). Running the script creates a Python virtual environment, installs dependencies, downloads the browser components, and opens the management dashboard in your default browser at a local address. A diagnostic script is included for checking the production environment before deployment. Unit tests cover the zero-amount filtering logic, proxy selection algorithms, and multi-account queuing. The repository's disclaimer states this code is for security auditing and academic research only, and must not be used for fraud or to circumvent payment controls in violation of any platform's terms of service.