Advertisement
D3vBl4ck

Flarum like abuser

Jan 27th, 2020
18,459
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Python 3.21 KB | None | 0 0
  1. import requests, os, sys, random, string, time
  2.  
  3. portada = '''
  4. ##################################################
  5. ##################################################
  6. ###           [LIKE ABUSER - FLARUM]           ###
  7. ###             [C0d3d by D3vBl4ck]             ###
  8. ##################################################
  9. ##################################################
  10. '''
  11.  
  12.  
  13. def parseURL(url):
  14.     return url.replace("http://", "").replace("https://", "").split('/')[0]
  15.  
  16.  
  17. def randString():
  18.     return ''.join(random.sample(string.ascii_letters, 15))
  19.  
  20.  
  21. def reply(url, uToken, uCookie, hID):
  22.     try:
  23.         headers = {
  24.             "Content-Type": "application/json; charset=utf-8",
  25.             "Cookie": "flarum_session="+uCookie,
  26.             "Host": parseURL(url),
  27.             "Origin": url,
  28.             "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0",
  29.             "X-CSRF-Token": uToken
  30.         }
  31.         payload = {"data":{"type":"posts","attributes":{"content":randString()+", coded by d3vbl4ck! ^^! :* @d3vbl4ck"},"relationships":{"discussion":{"data":{"type":"discussions","id":hID}}}}}
  32.         reply_response = requests.post(url+'api/posts',json=payload, headers=headers, timeout=60.0000000)
  33.         replyData = reply_response.json()
  34.         return replyData['data']['id']
  35.     except requests.exceptions.ConnectionError:
  36.         print('[X] REQUEST PROBLEM.')
  37.  
  38.  
  39. def botLiker(url,bToken,bCookie,rID):
  40.     try:
  41.         headers = {
  42.             "Content-Type": "application/json; charset=utf-8",
  43.             "Cookie": "flarum_session="+bCookie,
  44.             "Host": parseURL(url),
  45.             "Origin": url,
  46.             "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:70.0) Gecko/20100101 Firefox/70.0",
  47.             "X-CSRF-Token": bToken,
  48.             "X-HTTP-Method-Override": "PATCH"
  49.         }
  50.         payload = {"data":{"type":"posts","id":rID,"attributes":[True,False,"vote"]}}
  51.         requests.post(url+'api/posts/'+rID, json=payload, headers=headers, timeout=60.0000000)
  52.         return True
  53.     except requests.exceptions.ConnectionError:
  54.         print('[X] REQUEST PROBLEM.')
  55.  
  56.  
  57. class Exploit:
  58.     def __init__(self):
  59.         if os.name in ("nt", "dos", "ce"):
  60.             os.system('color e')
  61.             print(portada)
  62.             try:
  63.                 url = raw_input("[?] Target: ")
  64.                 hID = raw_input("[?] Hilo: ")
  65.                 uToken = raw_input("[?] User-CSRF-Token: ")
  66.                 uCookie = raw_input("[?] User-Cookie: ")
  67.                 bToken = raw_input("[?] Bot-CSRF-Token: ")
  68.                 bCookie = raw_input("[?] Bot-Cookie: ")
  69.                 cLikes = raw_input("[?] Likes: ")
  70.                 for n in range(cLikes):
  71.                     if botLiker(url, bToken, bCookie, reply(url, uToken, uCookie, hID)) == True:
  72.                         print("SUCCES, LIKE: %s, TO POST ID: %s" % (n+1,hID))
  73.                         print("DURMISLEEPING...ZZZZZZZZZ")
  74.                         time.sleep(15)
  75.                     else:
  76.                         print("ERROR TO LIKE: %s, TO POST ID: %s" % (n+1,hID))
  77.             except KeyError:
  78.                 print('[X] Value error')
  79.  
  80.  
  81. if __name__ == '__main__':
  82.     Exploit()
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement