Home Explore Help
Sign In
epsylon
/
cintruder
Watch 1
Star 0
Fork 0
Files Issues 0 Pull Requests 0
Tree: 88cc450a0d
Branches Tags
cintruder
/
core
/
webgui.py

webgui.py 26 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598 
  1. #!/usr/bin/python
    2. 

  2. # -*- coding: iso-8859-15 -*-
    3. 

  3. """
    4. 

  4. This file is part of the cintruder project, http://cintruder.03c8.net
    5. 

  5. 

  6. Copyright (c) 2012/2019 psy <epsylon@riseup.net>
    7. 

  7. 

  8. cintruder is free software; you can redistribute it and/or modify it under
    9. 

  9. the terms of the GNU General Public License as published by the Free
    10. 

  10. Software Foundation version 3 of the License.
    11. 

  11. 

  12. cintruder is distributed in the hope that it will be useful, but WITHOUT ANY
    13. 

  13. WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    14. 

  14. FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
    15. 

  15. details.
    16. 

  16. 

  17. You should have received a copy of the GNU General Public License along
    18. 

  18. with cintruder; if not, write to the Free Software Foundation, Inc., 51
    19. 

  19. Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    20. 

  20. """
    21. 

  21. import socket, threading, re, base64, os, time
    22. 

  22. import webbrowser, subprocess, urllib, json, sys
    23. 

  23. from options import CIntruderOptions
    24. 

  24. from pprint import pprint
    25. 

  25. from shutil import copyfile
    26. 

  26. 

  27. host = "0.0.0.0"
    28. 

  28. port = 9999
    29. 

  29. 

  30. class ClientThread(threading.Thread):
    31. 

  31.     def __init__(self, ip, port, socket):
    32. 

  32.         threading.Thread.__init__(self)
    33. 

  33.         self.ip = ip
    34. 

  34.         self.port = port
    35. 

  35.         self.socket = socket
    36. 

  36.         self.pages = Pages()
    37. 

  37. 

  38.     def run(self):
    39. 

  39.         req = self.socket.recv(2048)
    40. 

  40.         res = self.pages.get(req)
    41. 

  41.         out = "HTTP/1.0 %s\r\n" % res["code"]
    42. 

  42.         out += "Pragma: no-cache\n"
    43. 

  43.         out += "Expires: Fri, 30 Oct 1998 00:00:01 GMT\n"
    44. 

  44.         out += "Cache-Control: no-cache, must-revalidate\n"
    45. 

  45.         out += "Content-Type: %s\r\n\r\n" % res["ctype"]
    46. 

  46.         out += "%s" % res["html"]
    47. 

  47.         self.socket.send(out)
    48. 

  48.         self.socket.close()
    49. 

  49.         if "run" in res and len(res["run"]):
    50. 

  50.             subprocess.Popen(res["run"], shell=True)
    51. 

  51. 

  52. class Pages():
    53. 

  53.     def __init__(self):
    54. 

  54.         self.options = CIntruderOptions()
    55. 

  55.         self.pages = {}
    56. 

  56.         if not os.path.exists("outputs/words/"): 
    57. 

  57.             os.mkdir("outputs/words/")
    58. 

  58. 

  59.         self.pages["/header"] = """
    60. 

  60. <!DOCTYPE html><html>
    61. 

  61. <head>
    62. 

  62. <meta name="author" content="psy">
    63. 

  63. <meta name="robots" content="noindex, nofollow">
    64. 

  64. <meta http-equiv="content-type" content="text/xml; charset=utf-8" /> 
    65. 

  65. <title>CINTRUDER: OCR Bruteforcing Toolkit</title>
    66. 

  66. <script type="text/javascript" src="/lib.js"></script>
    67. 

  67. <script src="js/web.js" type="text/javascript"></script>
    68. 

  68. <style>
    69. 

  69. a:link {
    70. 

  70.     color: cyan;
    71. 

  71. }
    72. 

  72. a:visited {
    73. 

  73.     color: black;
    74. 

  74. }
    75. 

  75. </style>
    76. 

  76. <style>
    77. 

  77. input.button {
    78. 

  78.     width: 20em;  height: 2em;
    79. 

  79. }
    80. 

  80. </style>
    81. 

  81. """
    82. 

  82.         self.pages["/footer"] = """</body>
    83. 

  83. </html>
    84. 

  84. """
    85. 

  85.         self.pages["/"] = self.pages["/header"] + """
    86. 

  86. <script>loadXMLDoc()</script></head><body bgcolor="blue" text="white" style="monospace;font-size:14px;" >
    87. 

  87. <center>
    88. 

  88. <table border="1" cellpadding="10" cellspacing="5" width="90%">
    89. 

  89.  <tr>
    90. 

  90.  <td bgcolor="white"><center><a href="http://cintruder.03c8.net" target="_blank"><img src="images/cintruder.png"></a></center></td>
    91. 

  91.  <td>
    92. 

  92. <center><h3><a href="https://github.com/epsylon/cintruder" target="_blank">CINTRUDER</a> is an automatic pentesting tool to bypass <a href="https://en.wikipedia.org/wiki/CAPTCHA" target="_blank">captchas</a><br/><br/>
    93. 

  93. Contact: psy (<a href="mailto:epsylon@riseup.net">epsylon@riseup.net</a>) - [<a href="https://03c8.net" target="_blank">03c8.net</a>]<br><br>
    94. 

  94. License: <a href="http://www.gnu.org/licenses/quick-guide-gplv3.pdf" target="_blank">GPLv3</a> | Donate: <a href="https://blockchain.info/address/19aXfJtoYJUoXEZtjNwsah2JKN9CK5Pcjw" target="_blank">BTC</a></h3></center>
    95. 

  95. </td>
    96. 

  96.  </tr></table><br/>
    97. 

  97. <table cellpadding="10" cellspacing="5" width="90%">
    98. 

  98.   <tr>
    99. 

  99.    <td width="315px">
    100. 

  100. <center>
    101. 

  101. <table border="1" cellpadding="10" cellspacing="5">
    102. 

  102. <tr>
    103. 

  103.  <td>
    104. 

  104. Track: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="track"/ CHECKED>
    105. 

  105. Train: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="train"/>
    106. 

  106. Crack: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="crack"/>
    107. 

  107.  </td>
    108. 

  108. </tr></table>
    109. 

  109. </center>
    110. 

  110. </td>
    111. 

  111.    <td><center>
    112. 

  112. <div id="ifTrack" style="display:none">
    113. 

  113. <table border="1" cellpadding="10" cellspacing="5">
    114. 

  114. <tr>
    115. 

  115.  <td><center><input type="text" name="track_url" id="track_url" size="43" placeholder="Download captchas from url (to: 'inputs/')"></center></td>
    116. 

  116.  <td><center>Num: <input type="text" name="track_num" id="track_num" size="2" value="5"></center></td>
    117. 

  117.  <td><center>TOR: <input type="checkbox" id="tor" name="tor"></center></td>
    118. 

  118.  <td align="right">Debug: <input type="checkbox" name="verbose" id="verbose"></td>
    119. 

  119.  <td><center><input type="submit" value="Download!" onclick="TrackCaptchas()"></center></td>
    120. 

  120. </tr></table>
    121. 

  121. </div>
    122. 

  122. <div id="ifTrain" style="display:none">
    123. 

  123. <table border="1" cellpadding="5" cellspacing="5">
    124. 

  124. <tr>
    125. 

  125.  <td><center>
    126. 

  126. LOCAL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_local"/ CHECKED>
    127. 

  127. URL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_url"/>
    128. 

  128.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    129. 

  129. </center></td>
    130. 

  130. <td>
    131. 

  131. <div id="ifLocal" style="display:none">
    132. 

  132. <center>
    133. 

  133. <table cellpadding="5" cellspacing="5">
    134. 

  134. <tr>
    135. 

  135.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    136. 

  136.     <input type='text' size="43" name='SourceFile' id='SourceFile' placeholder="Ex: inputs/test1.gif"></form></center></td>
    137. 

  137. </tr></table>
    138. 

  138. </center>
    139. 

  139. </div>
    140. 

  140. <div id="ifUrl" style="display:none">
    141. 

  141. <table cellpadding="2" cellspacing="2">
    142. 

  142. <tr>
    143. 

  143.  <td><center><input type="text" name="train_url" id="train_url" size="43" placeholder="Apply common OCR techniques to a remote captcha"></center></td>
    144. 

  144.  <td><center>TOR: <input type="checkbox" name="tor2" id="tor2"></center></td>
    145. 

  145. </tr></table>
    146. 

  146. </div>
    147. 

  147. </td>
    148. 

  148. </tr>
    149. 

  149. <tr>
    150. 

  150.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetTrainModule();" name="set_module" id="set_module"></td>
    151. 

  151.  <td>
    152. 

  152. <table>
    153. 

  153.  <tr>
    154. 

  154.   <td align="center">
    155. 

  155. <div id="ifMod_set" style="display:none">
    156. 

  156. <table cellpadding="5" cellspacing="5">
    157. 

  157.  <tr>
    158. 

  158.  <td>Name: <input type="text" name="use_mod" id="use_mod" size="12" placeholder="Ex: 'easy'"></td>
    159. 

  159.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    160. 

  160. </tr></table>
    161. 

  161. </div>
    162. 

  162.  </td>
    163. 

  163. </tr></table>
    164. 

  164.  </td>
    165. 

  165. </tr>
    166. 

  166. <tr>
    167. 

  167. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id" id="set_colour_id"></td>
    168. 

  168.  <td align="center">
    169. 

  169. <div id="ifMod_colour" style="display:none">
    170. 

  170. <table cellpadding="5" cellspacing="5">
    171. 

  171. <tr>
    172. 

  172.  <td>Set Colour ID: <input type="text" name="set_id" id="set_id" size="2" placeholder="Ex: 1"></td>
    173. 

  173. </tr></table>
    174. 

  174. </div>
    175. 

  175. </td>
    176. 

  176. </tr>
    177. 

  177. <tr>
    178. 

  178.  <td align="right">Debug: <input type="checkbox" name="verbose2" id="verbose2"></td>
    179. 

  179.  <td><center><input type="submit" class="button" value="Train!" onclick="TrainCaptchas()"></center></td>
    180. 

  180. </tr>
    181. 

  181. </table>
    182. 

  182. </div>
    183. 

  183. <div id="ifCrack" style="display:none">
    184. 

  184. <table border="1" cellpadding="5" cellspacing="5">
    185. 

  185. <tr>
    186. 

  186.  <td><center>
    187. 

  187. LOCAL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_local"/ CHECKED>
    188. 

  188. URL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_url"/>
    189. 

  189.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    190. 

  190. </center></td>
    191. 

  191. <td>
    192. 

  192. <div id="ifCrackLocal" style="display:none">
    193. 

  193. <center>
    194. 

  194. <table cellpadding="5" cellspacing="5">
    195. 

  195. <tr>
    196. 

  196.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    197. 

  197.     <input type='text' size="43" name='SourceFile2' id='SourceFile2' placeholder="Ex: inputs/test1.gif"></form></center></td>
    198. 

  198. </tr>
    199. 

  199. </table>
    200. 

  200. </center>
    201. 

  201. </div>
    202. 

  202. <div id="ifCrackUrl" style="display:none">
    203. 

  203. <table cellpadding="5" cellspacing="5">
    204. 

  204. <tr>
    205. 

  205.  <td><center><input type="text" name="crack_url" id="crack_url" size="43" placeholder="Brute force using local dictionary (from: 'dictionary/')"></center></td>
    206. 

  206.  <td><center>TOR: <input type="checkbox" name="tor3" id="tor3"></center></td>
    207. 

  207. </tr>
    208. 

  208. </table>
    209. 

  209. </div>
    210. 

  210. </td>
    211. 

  211. </tr>
    212. 

  212. <tr>
    213. 

  213.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetCrackModule();" name="set_module_crack" id="set_module_crack"></td>
    214. 

  214.  <td>
    215. 

  215. 

  216. <table>
    217. 

  217.  <tr>
    218. 

  218.   <td align="center">
    219. 

  219. <div id="ifMod_set_crack" style="display:none">
    220. 

  220. 

  221. <table cellpadding="5" cellspacing="5">
    222. 

  222.  <tr>
    223. 

  223.  <td>Name: <input type="text" name="use_mod_crack" id="use_mod_crack" size="12" placeholder="Ex: 'easy'"></td>
    224. 

  224.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    225. 

  225. </tr></table>
    226. 

  226. </div>
    227. 

  227.  </td>
    228. 

  228. </tr></table>
    229. 

  229.  </td>
    230. 

  230. </tr>
    231. 

  231. <tr>
    232. 

  232. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id3" id="set_colour_id3"></td>
    233. 

  233.  <td align="center">
    234. 

  234. <div id="ifMod_colour2" style="display:none">
    235. 

  235. <table cellpadding="5" cellspacing="5">
    236. 

  236. <tr>
    237. 

  237.  <td>Set Colour ID: <input type="text" name="set_id3" id="set_id3" size="2" placeholder="Ex: 1"></td>
    238. 

  238. </tr></table>
    239. 

  239. </div>
    240. 

  240. </td>
    241. 

  241. </tr>
    242. 

  242. <tr>
    243. 

  243. <td align="right">Export to XML: <input type="checkbox" onclick="javascript:SetXML();" name="set_xml" id="set_xml"></td>
    244. 

  244.  <td align="center">
    245. 

  245. <div id="ifMod_xml" style="display:none">
    246. 

  246. <table cellpadding="5" cellspacing="5">
    247. 

  247. <tr>
    248. 

  248.  <td>Filename: <input type="text" name="set_xml_file" id="set_xml_file" size="16" placeholder="Ex: php-captcha.xml"></td>
    249. 

  249. </tr></table>
    250. 

  250. </div>
    251. 

  251. </td>
    252. 

  252. </tr>
    253. 

  253. <tr>
    254. 

  254.  <td align="right">Debug: <input type="checkbox" name="verbose3" id="verbose3"></td>
    255. 

  255.  <td><center><input type="submit" class="button" value="Crack it!" onclick="CrackCaptchas()"></center></td>
    256. 

  256. </tr>
    257. 

  257. </table>
    258. 

  258. </div>
    259. 

  259. </center></td>
    260. 

  260.  </tr>
    261. 

  261. </table>
    262. 

  262. 

  263. <table cellpadding="5" cellspacing="5">
    264. 

  264.   <tr>
    265. 

  265.    <td>
    266. 

  266.       <div id="Results" style="display:none"><table width="100%" border="1" cellpadding="5" cellspacing="5"><th>Shell Info:<tr><td><div id="cmdOut"></div></td></tr></table></div>
    267. 

  267.    </td>
    268. 

  268.    </tr>
    269. 

  269.  <tr>
    270. 

  270.    <td align="center">
    271. 

  271.       <div id="Captcha-IN" style="display:none"><table border="1" width="100%" cellpadding="5" cellspacing="5"><th>Captcha Preview:<tr><td><center><img id="target_captcha_img_path" name="target_captcha_img_path" src=''></center></td></tr></table></div>
    272. 

  272.    </td>
    273. 

  273.  </tr>
    274. 

  274.   <tr>
    275. 

  275.    <td>
    276. 

  276.      <div id="OCR-out" style="display:none">
    277. 

  277.      <table width="100%" height="100%" border="1"><th>OCR Output:<tr>
    278. 

  278.     <td><iframe frameborder="0" id="directory-words" name="directory-words" width="800px" height="300px" src="directory-words"></iframe></td>
    279. 

  279.        </tr></table>
    280. 

  280.      </div>
    281. 

  281.   </td>
    282. 

  282.   </tr>
    283. 

  283. </table>
    284. 

  284. </center>
    285. 

  285. <br /><br/>
    286. 

  286. """ + self.pages["/footer"]
    287. 

  287. 

  288.         self.pages["/directory-words"] ="""<!DOCTYPE html><html><head><meta http-equiv="Content-type" content="text/html;charset=UTF-8"><script type="text/javascript" src="/lib.js"></script>
    289. 

  289. <script language="javascript">
    290. 

  290. function Reload(word){
    291. 

  291. var w = word.substring(word.lastIndexOf('/')+1);
    292. 

  292. document.getElementById(w).style.display = "none";
    293. 

  293. document.getElementById("discarding").style.display = "none";
    294. 

  294. }
    295. 

  295. function Reload_Added(word){
    296. 

  296. var w = word.substring(word.lastIndexOf('/')+1);
    297. 

  297. document.getElementById(w).style.display = "none";
    298. 

  298. document.getElementById("adding").style.display = "none";
    299. 

  299. }
    300. 

  300. function MoveOCR(word) {
    301. 

  301. var w = word.substring(word.lastIndexOf('/')+1);
    302. 

  302. symbol = "letter_" + w
    303. 

  303. letter = document.getElementById(symbol).value;
    304. 

  304. if(letter == ""){
    305. 

  305.  window.alert("You need to enter a valid dictionary symbol (Ex: p)");
    306. 

  306.  return
    307. 

  307. }
    308. 

  308. if(word == ""){
    309. 

  309.  word = "off";
    310. 

  310. }else{
    311. 

  311. params="symbol="+escape(word)+"&letter="+escape(letter);
    312. 

  312. }
    313. 

  313. runCommandX("cmd_move_ocr",params);
    314. 

  314. setTimeout(function() { Reload_Added(word) }, 2000); // delay 2
    315. 

  315. }
    316. 

  316. function RemoveOCR(word) {
    317. 

  317. if(word == ""){
    318. 

  318.  word = "off";
    319. 

  319. }else{
    320. 

  320. params="symbol="+escape(word);
    321. 

  321. }
    322. 

  322. runCommandX("cmd_remove_ocr",params);
    323. 

  323. setTimeout(function() { Reload(word) }, 2000); // delay 2
    324. 

  324. }
    325. 

  325. </script>
    326. 

  326. <script language="javascript">function ViewWord(word) {window.open(word,"_blank","fulscreen=no, titlebar=yes, top=180, left=320, width=720, height=460, resizable=yes", false);}</script></head><body><table width='100%'><tr><td align='center'><font color='white'><div id="cmdOut"></div></font></td></tr><tr><td><br><center><a href='javascript:runCommandX("cmd_dict");'><font color="cyan"><u>View Dictionary Info</u></font></a></center></td></tr><tr><td>"""+str("".join(self.list_words()))+"""</td></tr></table></body></html>"""
    327. 

  327. 

  328.         self.pages["/lib.js"] = """function loadXMLDoc() {
    329. 

  329.         var xmlhttp;
    330. 

  330.         if (window.XMLHttpRequest) {
    331. 

  331.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    332. 

  332.                 xmlhttp = new XMLHttpRequest();
    333. 

  333.         } else {
    334. 

  334.                 // code for IE6, IE5
    335. 

  335.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    336. 

  336.         }
    337. 

  337.         xmlhttp.onreadystatechange = function() {
    338. 

  338.                 if (xmlhttp.readyState == 4 ) {
    339. 

  339.                    if(xmlhttp.status == 200){
    340. 

  340.                            document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    341. 

  341.                            setTimeout("loadXMLDoc()", 3000); 
    342. 

  342.                    }
    343. 

  343.                 }
    344. 

  344.         }
    345. 

  345.         xmlhttp.send();
    346. 

  346. }
    347. 

  347. 

  348. function runCommandX(cmd,params) {
    349. 

  349.         var xmlhttp;
    350. 

  350.         if (window.XMLHttpRequest) {
    351. 

  351.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    352. 

  352.                 xmlhttp = new XMLHttpRequest();
    353. 

  353.         } else {
    354. 

  354.                 // code for IE6, IE5
    355. 

  355.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    356. 

  356.         }
    357. 

  357.         xmlhttp.onreadystatechange = function() {
    358. 

  358.                 if (xmlhttp.readyState == 4 ) {
    359. 

  359.                    if(xmlhttp.status == 200){
    360. 

  360. 								if(cmd.indexOf("?")!=-1){
    361. 

  361. 									s=cmd.split("?")
    362. 

  362. 									cmd=s[0]
    363. 

  363. 									params=s[1]
    364. 

  364. 								}
    365. 

  365.                                 document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    366. 

  366.                                 //document.getElementById("cmdOut").scrollIntoView();
    367. 

  367.                                 newcmd=cmd
    368. 

  368.                                 if(newcmd=="cmd_remove_ocr" || newcmd=="cmd_move_ocr" || newcmd=="cmd_dict"){ //do not refresh
    369. 

  369.                                     return;
    370. 

  370.                                 } else {
    371. 

  371.                                 if(newcmd=="cmd_list" || newcmd=="cmd_track" || newcmd == "cmd_tracklist" || newcmd=="cmd_crack" || newcmd=="cmd_train") newcmd=newcmd+"_update"
    372. 

  372. 								//do not refresh if certain text on response is found
    373. 

  373. 								if(newcmd.match(/update/) && 
    374. 

  374. 			 					(
    375. 

  375.                                                                   xmlhttp.responseText.match(/Number of tracked captchas/) ||
    376. 

  376.                                                                   xmlhttp.responseText.match(/to the correct folder/) ||
    377. 

  377.                                                                   xmlhttp.responseText.match(/by the moment/) ||
    378. 

  378.                                                                   xmlhttp.responseText.match(/Is that captcha supported?/) ||
    379. 

  379.                                                                   xmlhttp.responseText.match(/module not found/) ||
    380. 

  380.                                                                   xmlhttp.responseText.match(/No idea/) ||
    381. 

  381.                                                                   xmlhttp.responseText.match(/Possible Solution/) ||
    382. 

  382.                                                                   xmlhttp.responseText.match(/Internal problems/) ||
    383. 

  383. 								  xmlhttp.responseText.match(/List end/)
    384. 

  384. 										) 
    385. 

  385. 											) return;
    386. 

  386.                                 setTimeout(function(){runCommandX(newcmd,params)}, 3000);
    387. 

  387. 								return;}
    388. 

  388.                    }
    389. 

  389.                 }
    390. 

  390.         }
    391. 

  391. 		if(typeof params != "undefined") cmd=cmd+"?"+params
    392. 

  392.         xmlhttp.open("GET", cmd, true);
    393. 

  393.         xmlhttp.send();
    394. 

  394. }
    395. 

  395. """
    396. 

  396.     def list_words(self):
    397. 

  397.         m = []
    398. 

  398.         t = os.listdir("outputs/words")
    399. 

  399.         for f in t:
    400. 

  400.             ocr_preview = "<br><table style='display:block;' id='"+f+"' name='"+f+"' border='1' width='100%' cellpadding='5' cellspacing='5'><tr><td align='left' width='100%'><font color='cyan'><u><a onclick=javascript:ViewWord('images/previews/ocr/"+f+"');return false;>"+f+"</a></u></td><td align='center'><a onclick=javascript:ViewWord('images/previews/ocr/"+f+"');return false;><img border='1' style='border-color:red;' src='images/previews/ocr/"+f+"'></a></font></td><td align='center'><input type='text' name='letter_"+f+"' id='letter_"+f+"' size='2'></td><td align='center'><input type='submit' class='button' value='ADD!' onclick=javascript:MoveOCR('images/previews/ocr/"+f+"');return false;></td><td align='center'><input type='submit' class='button' value='Discard...' onclick=javascript:RemoveOCR('images/previews/ocr/"+f+"');return false;></td></tr></table>"
    401. 

  401.             m.append(ocr_preview)
    402. 

  402.         return m
    403. 

  403. 

  404.     def convert_size(self, size):
    405. 

  405.         import math
    406. 

  406.         if (size == 0):
    407. 

  407.             return '0B'
    408. 

  408.         size_name = ("B", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB")
    409. 

  409.         i = int(math.floor(math.log(size,1024)))
    410. 

  410.         p = math.pow(1024,i)
    411. 

  411.         s = round(size/p,2)
    412. 

  412.         return '%s %s' % (s,size_name[i])
    413. 

  413. 

  414.     def buildGetParams(self, request):
    415. 

  415.         params = {}
    416. 

  416.         path = re.findall("^GET ([^\s]+)", request)
    417. 

  417.         if path:
    418. 

  418.             path = path[0]
    419. 

  419.             start = path.find("?")
    420. 

  420.             if start != -1:
    421. 

  421.                 for param in path[start+1:].split("&"):
    422. 

  422.                     f = param.split("=")
    423. 

  423.                     if len(f) == 2:
    424. 

  424.                         var = f[0]
    425. 

  425.                         value = f[1]
    426. 

  426.                         value = value.replace("+", " ")
    427. 

  427.                         value = urllib.unquote(value)
    428. 

  428.                         params[var] = value
    429. 

  429.         return params
    430. 

  430. 

  431.     def get(self, request):
    432. 

  432.         cmd_options = ""
    433. 

  433.         runcmd = ""
    434. 

  434.         res = re.findall("^GET ([^\s]+)", request)
    435. 

  435.         if res is None:
    436. 

  436.             return
    437. 

  437.         pGet = {}
    438. 

  438.         page = res[0]
    439. 

  439.         paramStart = page.find("?")
    440. 

  440.         if paramStart != -1:
    441. 

  441.             page = page[:paramStart]
    442. 

  442.             pGet = self.buildGetParams(request)
    443. 

  443.         if page.startswith("/images/") or page.startswith("/js/") or page.startswith("/inputs/"):
    444. 

  444.             if os.path.exists("core/"+page[1:]):
    445. 

  445.                 f=open("core/"+page[1:])
    446. 

  446.                 self.pages[page]=f.read()
    447. 

  447.         if page == "/cmd_dict": # view dictionary info
    448. 

  448.             path, dirs, files = os.walk("dictionary/").next()
    449. 

  449.             total_dirs = len(dirs)
    450. 

  450.             total_files = len(files)
    451. 

  451.             size = 0
    452. 

  452.             for d in dirs:
    453. 

  453.                 path, dirs, files = os.walk("dictionary/"+d).next()
    454. 

  454.                 total_files = total_files + len(files)
    455. 

  455.                 for f in files:
    456. 

  456.                     size += os.path.getsize("dictionary/"+d+"/"+f)
    457. 

  457.             size = self.convert_size(size)
    458. 

  458.             last_update = time.ctime(os.path.getctime("dictionary/"))
    459. 

  459.             self.pages["/cmd_dict"] = "<table align='center' border='1' cellspacing='5' cellpadding='5'><tr><td><u>Creation Date:</u></td><td><u>Size:</u></td><td><u>Total Words:</u></td><td><u>Total Symbols:</u></td></tr><tr><td align='center'>"+str(last_update)+"</td><td align='center'>"+str(size)+"</td><td align='center'>"+str(total_dirs)+"</td><td align='center'>"+str(total_files)+"</td></tr></table>"
    460. 

  460.         if page == "/cmd_remove_ocr": # remove ocr image from previews
    461. 

  461.             if not pGet["symbol"]=="off":
    462. 

  462.                 self.pages["/cmd_remove_ocr"] = "<div style='display:block' id='discarding' name='discarding'><pre>[Info] Discarding image from previews...</pre></div>"
    463. 

  463.                 symbol = pGet["symbol"]
    464. 

  464.                 try:
    465. 

  465.                     os.remove("core/" + symbol)
    466. 

  466.                 except:
    467. 

  467.                     pass
    468. 

  468.         if page == "/cmd_move_ocr": # move ocr image from previews to dictionary
    469. 

  469.             if not pGet["symbol"]=="off":
    470. 

  470.                 self.pages["/cmd_move_ocr"] = "<div style='display:block' id='adding' name='adding'><pre>[Info] Adding image from previews to dictionary...</pre></div>"
    471. 

  471.                 symbol = pGet["symbol"]
    472. 

  472.                 letter = pGet["letter"]
    473. 

  473.                 o = "core/" + symbol
    474. 

  474.                 d = "dictionary/" + letter
    475. 

  475.                 try:
    476. 

  476.                     if not os.path.exists(d):
    477. 

  477.                         os.makedirs(d)
    478. 

  478.                     head, tail = os.path.split(symbol)
    479. 

  479.                     final = d + "/" + tail
    480. 

  480.                     copyfile(o, final) # copy file to letter on dictionary
    481. 

  481.                     os.remove(o) # purge from previews
    482. 

  482.                 except:
    483. 

  483.                     pass
    484. 

  484.         if page == "/cmd_list": # list mods
    485. 

  485.             self.pages["/cmd_list"] = "<pre>Waiting for a list of available modules...</pre>"
    486. 

  486.             runcmd = "(python -i cintruder --mods-list "+ "|tee /tmp/out) &"
    487. 

  487.         if page == "/cmd_list_update":
    488. 

  488.             if not os.path.exists('/tmp/out'):
    489. 

  489.                 open('/tmp/out', 'w').close()
    490. 

  490.             with open('/tmp/out', 'r') as f:
    491. 

  491.                 self.pages["/cmd_list_update"] = "<pre>"+f.read()+"<pre>"
    492. 

  492.         if page == "/cmd_track": # tracking
    493. 

  493.             self.pages["/cmd_track"] = "<pre>Waiting for tracking results...</pre>"
    494. 

  494.             if pGet["tor"]=="on": 
    495. 

  495.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    496. 

  496.             if pGet["verbose"]=="on": 
    497. 

  497.                 cmd_options = cmd_options + "--verbose "
    498. 

  498.             runcmd = "(python -i cintruder --track '"+pGet["tracking_source"]+"' --track-num '"+pGet["tracking_num"]+"' " + cmd_options + "|tee /tmp/out) &"
    499. 

  499.         if page == "/cmd_track_update":
    500. 

  500.             if not os.path.exists('/tmp/out'):
    501. 

  501.                 open('/tmp/out', 'w').close()
    502. 

  502.             with open('/tmp/out', 'r') as f:
    503. 

  503.                 self.pages["/cmd_track_update"] = "<pre>"+f.read()+"<pre>"
    504. 

  504.         if page == "/cmd_tracklist": # list last tracks
    505. 

  505.             self.pages["/cmd_tracklist"] = "<pre>Waiting for a list of last tracks...</pre>"
    506. 

  506.             runcmd = "(python -i cintruder --tracked-list "+ "|tee /tmp/out) &"
    507. 

  507.         if page == "/cmd_tracklist_update":
    508. 

  508.             if not os.path.exists('/tmp/out'):
    509. 

  509.                 open('/tmp/out', 'w').close()
    510. 

  510.             with open('/tmp/out', 'r') as f:
    511. 

  511.                 self.pages["/cmd_tracklist_update"] = "<pre>"+f.read()+"<pre>"
    512. 

  512.         if page == "/cmd_train": # training
    513. 

  513.             self.pages["/cmd_train"] = "<pre>Waiting for training results...</pre>"
    514. 

  514.             if pGet["tor"]=="on": 
    515. 

  515.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    516. 

  516.             if pGet["verbose"]=="on": 
    517. 

  517.                 cmd_options = cmd_options + "--verbose "
    518. 

  518.             if not pGet["colourID"]=="off":
    519. 

  519.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    520. 

  520.             if not pGet["module"]=="off": 
    521. 

  521.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    522. 

  522.             if pGet["source_file"]=="off": # from remote url source
    523. 

  523.                 runcmd = "(python -i cintruder --train '"+pGet["train_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    524. 

  524.             else: # from local source 
    525. 

  525.                 source_file = pGet["source_file"]
    526. 

  526.                 runcmd = "(python -i cintruder --train '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    527. 

  527.         if page == "/cmd_train_update":
    528. 

  528.             if not os.path.exists('/tmp/out'):
    529. 

  529.                 open('/tmp/out', 'w').close()
    530. 

  530.             with open('/tmp/out', 'r') as f:
    531. 

  531.                 self.pages["/cmd_train_update"] = "<pre>"+f.read()+"<pre>"
    532. 

  532.         if page == "/cmd_crack": # cracking
    533. 

  533.             self.pages["/cmd_crack"] = "<pre>Waiting for cracking (bruteforcing) results...</pre>"
    534. 

  534.             if pGet["tor"]=="on":
    535. 

  535.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    536. 

  536.             if pGet["verbose"]=="on":
    537. 

  537.                 cmd_options = cmd_options + "--verbose "
    538. 

  538.             if not pGet["colourID"]=="off":
    539. 

  539.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    540. 

  540.             if not pGet["module"]=="off":
    541. 

  541.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    542. 

  542.             if not pGet["xml"]=="off":
    543. 

  543.                 cmd_options = cmd_options + "--xml='" + pGet["xml"] + "' "
    544. 

  544.             if pGet["source_file"]=="off": # from remote url source
    545. 

  545.                 runcmd = "(python -i cintruder --crack '"+pGet["crack_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    546. 

  546.             else: # from local source 
    547. 

  547.                 source_file = pGet["source_file"]
    548. 

  548.                 runcmd = "(python -i cintruder --crack '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    549. 

  549.         if page == "/cmd_crack_update":
    550. 

  550.             if not os.path.exists('/tmp/out'):
    551. 

  551.                 open('/tmp/out', 'w').close()
    552. 

  552.             with open('/tmp/out', 'r') as f:
    553. 

  553.                 self.pages["/cmd_crack_update"] = "<pre>"+f.read()+"<pre>"
    554. 

  554.         ctype = "text/html"
    555. 

  555.         if page.find(".js") != -1:
    556. 

  556.             ctype = "text/javascript"
    557. 

  557.         elif page.find(".txt") != -1:
    558. 

  558.             ctype = "text/plain"
    559. 

  559.         elif page.find(".ico") != -1:
    560. 

  560.             ctype = "image/x-icon"
    561. 

  561.         elif page.find(".png") != -1:
    562. 

  562.             ctype = "image/png"
    563. 

  563.         elif page.find(".jpeg") != -1:
    564. 

  564.             ctype = "image/jpeg"
    565. 

  565.         elif page.find(".jpg") != -1:
    566. 

  566.             ctype = "image/jpeg"
    567. 

  567.         elif page.find(".gif") != -1:
    568. 

  568.             ctype = "image/gif"
    569. 

  569.         if page in self.pages:
    570. 

  570.             return dict(run=runcmd, code="200 OK", html=self.pages[page], ctype=ctype)
    571. 

  571.         return dict(run=runcmd, code="404 Error", html="404 Error<br><br>Page not found...", ctype=ctype)
    572. 

  572. 

  573. class Command(object):
    574. 

  574.     def __init__(self, cmd):
    575. 

  575.         self.cmd = cmd
    576. 

  576.         self.process = None
    577. 

  577. 

  578.     def run(self, timeout):
    579. 

  579.         def target():
    580. 

  580.             self.process = subprocess.Popen(self.cmd, shell=True)
    581. 

  581.         thread = threading.Thread(target=target)
    582. 

  582.         thread.start()
    583. 

  583.         thread.join(timeout)
    584. 

  584.         if thread.is_alive():
    585. 

  585.             self.process.terminate()
    586. 

  586.             thread.join()
    587. 

  587. 

  588. if __name__ == "__main__":
    589. 

  589.     webbrowser.open('http://127.0.0.1:9999', new=1)
    590. 

  590.     tcpsock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    591. 

  591.     tcpsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
    592. 

  592.     tcpsock.bind((host, port))
    593. 

  593.     while True:
    594. 

  594.         tcpsock.listen(4)
    595. 

  595.         (clientsock, (ip, c_port)) = tcpsock.accept()
    596. 

  596.         newthread = ClientThread(ip, c_port, clientsock)
    597. 

  597.         newthread.start()
    598. 

  598.