bruteforceopenSSL.py

# -*- coding: utf-8 -*-

import hashlib
import base64
import sys
import itertools
import requests   #add this module to directly send the request
import pprint
import time

# PARAMETERS

# mode = 4  
separator_char = b" "  #what we use to separate the different data
myName = "yourname"
myEmail = "youremail"
sublist_size = 5




pp = pprint.PrettyPrinter(indent=4)
headers = {
	'User-Agent': 'Mozilla/5.0 (Windows NT 5.1; rv:20.0) Gecko/20100101 Firefox/20.0',
	'Content-Type': 'application/x-www-form-urlencoded',
}

s = requests.Session()


# DATA
pvk1 = b"KzkZxdhRGxB7eX4u1skXkfJ7VB8JfPp7Nfos3jiF7PQUNMh2SHDE" #private key 0.1BTC

pvk2 = b"KxPEUpQ5BE75UGRUVjNmf8dQuWsmP9jqL3FUUjavdRW69MEcmg6C" #private key 0.1BTC

password_b64_data = b"L379F48502"

b64_data = b"U2FsdGVkX19Q3I//VCH0U3cVtITZ3ckILJnUcdPX3Gs5qjdF1UjZ3mAftGivtFYDN5ZCSkBynnVqBawl4p8wKO0O8zI6D0A1+VEVCUyEvEeNoUfGcS0El9d93vsPxbg7D5avufQsScgsk3QEtq9/M4Do32OKFeq00/3NrxWOsMmh3AXmDzuuZ0qmZaI7re16FcXIrmPPiQDOHRc7wt0ng6qLiNz7VqESRTdxPOahKFRkWT8sT+Ur2y+2iZ2LEaxNM7UZqcPwYgm6FoKOVjnqdeg30R27jc6AoFPyRZ2g8+EJMp3n/pf94oSCLEWkc0osjH9DqbM6DUptu3HJbAVwXQ==" #base64 data

b64_data_unzip = b"U2FsdGVkX1+WPMJQISUVUvGRg7p4zCX4jIODIGb6b6cAreXFxv0WOxgCeSw9K+imTHiWMkRq45FsPXHs3TjYqcJz7QzQ8HeM340EwWQWXAi0fVy+r6NPmiJRgMgMqLCu4Q9o/WkNyHxvPScNgG9jf8gskggx10FiTcoyF1KE+nxjmRkEuj7uQQsPrrlRP3sjll4KXhAzrGQZi5E4sajQOBGQfaJjei5fHXXO6sxeYsFcuxzo3JdMOF3JFYQtuUDY" # unzipped base64 data

seeds = b"cry buyer grain save vault sign lyrics rhythm music fury horror mansion" #seed text

seeds2 = b"cry buyer grain save vault sign lyrics rhythm music fury horror mansion debris slim immune lock actual tide gas vapor fringe pole flat glance" #seed text

# shasum256_challenge = b"37fad2f9db9b74dc8fd920685925c725ba41b88c4a5e0885bbc43d75fb369f81" #shasum256 challenge.enc

# shasum256_challengezip = b"798ffc7b55fc1c529d9f77ec5a88dcdc8a656c42cd0866815eae2266ef84f57b" #shasum256 challenge.enc

all_data_list = ["K", "D", "F", "6", "4", "C", "1", "0", "E", "A", "D", "9"]
# all_data_list = [1, 2, 3, 4, 5, 6 ]

# if mode == 1:

# 	s1 = pvk1
# 	s2 = b64_data
# 	s3 = b64_data_unzip

# 	form_data = [s1, s2, s3]

# elif mode == 2:
# 	s1 = seeds
# 	s2 = b64_data
# 	s3 = b64_data_unzip

# 	form_data = [s1, s2, s3]

# elif mode == 3:
# 	s1 = pvk1
# 	s2 = shasum256_challenge
# 	s3 = shasum256_challengezip

# 	form_data = [s1, s2, s3]

# elif mode == 4:
# 	s1 = seeds
# 	s2 = shasum256_challenge
# 	s3 = shasum256_challengezip

# 	form_data = [s1, s2, s3]





# create a list of permutation of elements within  the form_data list  
#ex  [[s1, s2, s3], [s1, s3, s2], [s2, s1, s3]...........]
all_sublist_with_size_element = list(itertools.permutations(all_data_list, sublist_size))

print(all_sublist_with_size_element)
print(len(all_sublist_with_size_element))

# sys.exit()

# hash_test = list(itertools.permutations(form_data))

with open("hashlist.txt","w") as f:
	#take a list of permuted elements
	for x in all_sublist_with_size_element:
		first = True
		withSeparator = b""
		#happen elements in one line
		for y in x:
			if first:
				first = False
				withSeparator += y
			else:
				withSeparator +=  separator_char  + y
		postdata = {
			"form-name" : myName,
			"form-email" : myEmail,
			"message" : hashlib.sha256(withSeparator).hexdigest()
		}

		q = s.post('https://bitcoinchallenge.codes/register-310/', headers=headers, data=postdata)
		print(q.status_code)
		# print("\n")
		print(withSeparator)
		# print("\n")
		print(hashlib.sha256(withSeparator).hexdigest())
		# dont find the error message is a win!!!!
		if(q.text.find("Your SHA256 hash is unknown to me. You've got more work to do") == -1):
			print("success with the hash:" + hashlib.sha256(withSeparator).hexdigest())
			f.write(hashlib.sha256(withSeparator).hexdigest() + "\n\n")
			sys.exit()
		else:
			print("failed")

		# wait one second to avoid spamming
		time.sleep(1)
		# sys.exit()