#!/usr/bin/perl

use CGI::Carp qw(fatalsToBrowser);

require LWP::UserAgent;
require JSON;
require HTTP::Cookies;

use LWP::Protocol::https;
use HTTP::Request::Common;
use MIME::Base64;
use CGI;

my($recpChallenge, $req, $headers, %params, $emailUser, $cgi, $img) = ('6LfbTAAAAAAAAE0hk8Vnfd1THHnn9lJuow6fgulO');

print "Content-Type: text/html\n\n";

$cgi    = new CGI;
$ua     = LWP::UserAgent->new;

$ua->default_header('Referer', 'https://twitter.com');

$req = $ua->request(GET 'http://www.google.com/recaptcha/api/challenge?k='. $recpChallenge);
$req->content =~ m/challenge.{4}(.*?)'/;

$req = $ua->request(GET 'http://google.com/recaptcha/api/image?c='. $1);
$img = encode_base64($req->decoded_content);

$rcf = $cgi->param('recaptcha_challenge_field');

if(defined($rcf)) {
    &createFake($rcf);
}

{
print <<FORM
    <br /><br />
    <center>
        <h2>digita o captcha e manda bala</h2>
        <form method="POST" action="">
            <img src='data:image/jpeg;base64,$img'/> <br />
            <input type="text" name="recaptcha_challenge_field" style="width: 300px"/>
        </form>
    </center>
    <script>document.getElementsByName('recaptcha_challenge_field')[0].focus()</script>

FORM
}

$ua->cookie_jar(HTTP::Cookies->new(
        'file'              => 'cookies.txt',
        'autosave'          => 1,
        'hide_cookie2'      => 0,
        'ignore_discard'    => 1,
    )
);

$ua->agent('webkit browser 1.0');
$ua->ssl_opts('verify_hostname' => 1);

sub createFake {
    my $rf= shift;

    # pega um e-mail no no-spam.ws
    $req = $ua->request(GET 'http://no-spam.ws');
    $req->content =~ m/class..randomly.{2}value..(.*?)"/i;
    $emailUser = $1;

    print 'E-mail: ', $emailUser, '@no-spam.ws<br />';

    $user = "papa".int(rand(10000000));
    # cria o fake no twitter
    %params = (
        'authenticity_token'          => "",
        'recaptcha_challenge_field'   => $recpChallenge,
        'recaptcha_response_field'    => $rf,
        'user[name]'                  => "Pedro Papadopolis",
        'user[email]'                 => $emailUser. '@no-spam.ws',
        'user[user_password]'         => "souapenasumfake",
        'user[screen_name]'           => $user,
        'user[remember_me_on_signup]' => 1,
        'user[remember_me_on_signup]' => "",
        'context'                     => front,
        'user[discoverable_by_email]' => 1,
        'user[send_email_newsletter]' => 1
    );

    $req = $ua->request(POST 'https://twitter.com/account/create', \%params);
    if($req =~ m/welcome/i) {
        print 'Perfil ', $user,' criado, confirmando a conta...<br />';

        # confirma a conta
        $req = $ua->request(GET 'http://no-spam.ws/?login='. $emailUser);
        $req->content =~ m/mail.(\d+)/i;

        $req = $ua->request(GET 'http://no-spam.ws/?login='.$emailUser .'&mail='.$1);
        $req->content =~ m/(http.{3}twitter\.com.account.confirm_email.*?)"/i;

        $req = $ua->request(GET $1);
        print $req->content;
    } else {
        print '<font color="red">Captcha digitado errado.</font>';
    }
}