Home Explore Help
Sign In
epsylon
/
cintruder
Watch 1
Star 0
Fork 0
Files Issues 0 Pull Requests 0
Tree: 92da7d36dd
Branches Tags
cintruder
/
core
/
webgui.py

webgui.py 27 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626 
  1. #!/usr/bin/python
    2. 

  2. # -*- coding: iso-8859-15 -*-
    3. 

  3. """
    4. 

  4. This file is part of the cintruder project, http://cintruder.03c8.net
    5. 

  5. 

  6. Copyright (c) 2012/2019 psy <epsylon@riseup.net>
    7. 

  7. 

  8. cintruder is free software; you can redistribute it and/or modify it under
    9. 

  9. the terms of the GNU General Public License as published by the Free
    10. 

  10. Software Foundation version 3 of the License.
    11. 

  11. 

  12. cintruder is distributed in the hope that it will be useful, but WITHOUT ANY
    13. 

  13. WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    14. 

  14. FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
    15. 

  15. details.
    16. 

  16. 

  17. You should have received a copy of the GNU General Public License along
    18. 

  18. with cintruder; if not, write to the Free Software Foundation, Inc., 51
    19. 

  19. Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    20. 

  20. """
    21. 

  21. import socket, threading, re, base64, os, time
    22. 

  22. import webbrowser, subprocess, urllib, json, sys
    23. 

  23. from options import CIntruderOptions
    24. 

  24. from pprint import pprint
    25. 

  25. from shutil import copyfile
    26. 

  26. 

  27. host = "0.0.0.0"
    28. 

  28. port = 9999
    29. 

  29. 

  30. class ClientThread(threading.Thread):
    31. 

  31.     def __init__(self, ip, port, socket):
    32. 

  32.         threading.Thread.__init__(self)
    33. 

  33.         self.ip = ip
    34. 

  34.         self.port = port
    35. 

  35.         self.socket = socket
    36. 

  36.         self.pages = Pages()
    37. 

  37. 

  38.     def run(self):
    39. 

  39.         req = self.socket.recv(2048)
    40. 

  40.         res = self.pages.get(req)
    41. 

  41.         out = "HTTP/1.0 %s\r\n" % res["code"]
    42. 

  42.         out += "Pragma: no-cache\n"
    43. 

  43.         out += "Expires: Fri, 30 Oct 1998 00:00:01 GMT\n"
    44. 

  44.         out += "Cache-Control: no-cache, must-revalidate\n"
    45. 

  45.         out += "Content-Type: %s\r\n\r\n" % res["ctype"]
    46. 

  46.         out += "%s" % res["html"]
    47. 

  47.         self.socket.send(out)
    48. 

  48.         self.socket.close()
    49. 

  49.         if "run" in res and len(res["run"]):
    50. 

  50.             subprocess.Popen(res["run"], shell=True)
    51. 

  51. 

  52. class Pages():
    53. 

  53.     def __init__(self):
    54. 

  54.         self.options = CIntruderOptions()
    55. 

  55.         self.pages = {}
    56. 

  56.         if not os.path.exists("outputs/words/"): 
    57. 

  57.             os.mkdir("outputs/words/")
    58. 

  58. 

  59.         self.pages["/header"] = """
    60. 

  60. <!DOCTYPE html><html>
    61. 

  61. <head>
    62. 

  62. <meta name="author" content="psy">
    63. 

  63. <meta name="robots" content="noindex, nofollow">
    64. 

  64. <meta http-equiv="content-type" content="text/xml; charset=utf-8" /> 
    65. 

  65. <title>CINTRUDER: OCR Bruteforcing Toolkit</title>
    66. 

  66. <script type="text/javascript" src="/lib.js"></script>
    67. 

  67. <script src="js/web.js" type="text/javascript"></script>
    68. 

  68. <style>
    69. 

  69. a:link {
    70. 

  70.     color: cyan;
    71. 

  71. }
    72. 

  72. a:visited {
    73. 

  73.     color: black;
    74. 

  74. }
    75. 

  75. </style>
    76. 

  76. <style>
    77. 

  77. input.button {
    78. 

  78.     width: 20em;  height: 2em;
    79. 

  79. }
    80. 

  80. </style>
    81. 

  81. """
    82. 

  82.         self.pages["/footer"] = """</body>
    83. 

  83. </html>
    84. 

  84. """
    85. 

  85.         self.pages["/"] = self.pages["/header"] + """
    86. 

  86. <script>loadXMLDoc()</script></head><body bgcolor="blue" text="white" style="monospace;font-size:14px;" >
    87. 

  87. <center>
    88. 

  88. <table border="1" cellpadding="10" cellspacing="5" width="90%">
    89. 

  89.  <tr>
    90. 

  90.  <td bgcolor="white"><center><a href="http://cintruder.03c8.net" target="_blank"><img src="images/cintruder.png"></a></center></td>
    91. 

  91.  <td>
    92. 

  92. <center><h3><a href="https://github.com/epsylon/cintruder" target="_blank">CINTRUDER</a> is an automatic pentesting tool to bypass <a href="https://en.wikipedia.org/wiki/CAPTCHA" target="_blank">captchas</a><br/><br/>
    93. 

  93. Contact: psy (<a href="mailto:epsylon@riseup.net">epsylon@riseup.net</a>) - [<a href="https://03c8.net" target="_blank">03c8.net</a>]<br><br>
    94. 

  94. License: <a href="http://www.gnu.org/licenses/quick-guide-gplv3.pdf" target="_blank">GPLv3</a> | Donate: <a href="https://blockchain.info/address/19aXfJtoYJUoXEZtjNwsah2JKN9CK5Pcjw" target="_blank">BTC</a></h3></center>
    95. 

  95. </td>
    96. 

  96.  </tr></table><br/>
    97. 

  97. <table cellpadding="10" cellspacing="5" width="90%">
    98. 

  98.   <tr>
    99. 

  99.    <td width="315px">
    100. 

  100. <center>
    101. 

  101. <table border="1" cellpadding="10" cellspacing="5">
    102. 

  102. <tr>
    103. 

  103.  <td>
    104. 

  104. Track: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="track"/ CHECKED>
    105. 

  105. Train: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="train"/>
    106. 

  106. Crack: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="crack"/>
    107. 

  107.  </td>
    108. 

  108. </tr></table>
    109. 

  109. </center>
    110. 

  110. </td>
    111. 

  111.    <td><center>
    112. 

  112. <div id="ifTrack" style="display:none">
    113. 

  113. <table border="1" cellpadding="10" cellspacing="5">
    114. 

  114. <tr>
    115. 

  115.  <td><center><input type="text" name="track_url" id="track_url" size="43" placeholder="Download captchas from url (to: 'inputs/')"></center></td>
    116. 

  116.  <td><center>Num: <input type="text" name="track_num" id="track_num" size="2" value="5"></center></td>
    117. 

  117.  <td><center>TOR: <input type="checkbox" id="tor" name="tor"></center></td>
    118. 

  118.  <td align="right">Debug: <input type="checkbox" name="verbose" id="verbose"></td>
    119. 

  119.  <td><center><input type="submit" value="Download!" onclick="TrackCaptchas()"></center></td>
    120. 

  120. </tr></table>
    121. 

  121. </div>
    122. 

  122. <div id="ifTrain" style="display:none">
    123. 

  123. <table border="1" cellpadding="5" cellspacing="5">
    124. 

  124. <tr>
    125. 

  125.  <td><center>
    126. 

  126. LOCAL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_local"/ CHECKED>
    127. 

  127. URL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_url"/>
    128. 

  128.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    129. 

  129. </center></td>
    130. 

  130. <td>
    131. 

  131. <div id="ifLocal" style="display:none">
    132. 

  132. <center>
    133. 

  133. <table cellpadding="5" cellspacing="5">
    134. 

  134. <tr>
    135. 

  135.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    136. 

  136.     <input type='text' size="43" name='SourceFile' id='SourceFile' placeholder="Ex: inputs/test1.gif"></form></center></td>
    137. 

  137. </tr></table>
    138. 

  138. </center>
    139. 

  139. </div>
    140. 

  140. <div id="ifUrl" style="display:none">
    141. 

  141. <table cellpadding="2" cellspacing="2">
    142. 

  142. <tr>
    143. 

  143.  <td><center><input type="text" name="train_url" id="train_url" size="43" placeholder="Apply common OCR techniques to a remote captcha"></center></td>
    144. 

  144.  <td><center>TOR: <input type="checkbox" name="tor2" id="tor2"></center></td>
    145. 

  145. </tr></table>
    146. 

  146. </div>
    147. 

  147. </td>
    148. 

  148. </tr>
    149. 

  149. <tr>
    150. 

  150.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetTrainModule();" name="set_module" id="set_module"></td>
    151. 

  151.  <td>
    152. 

  152. <table>
    153. 

  153.  <tr>
    154. 

  154.   <td align="center">
    155. 

  155. <div id="ifMod_set" style="display:none">
    156. 

  156. <table cellpadding="5" cellspacing="5">
    157. 

  157.  <tr>
    158. 

  158.  <td>Name: <input type="text" name="use_mod" id="use_mod" size="12" placeholder="Ex: 'easy'"></td>
    159. 

  159.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    160. 

  160. </tr></table>
    161. 

  161. </div>
    162. 

  162.  </td>
    163. 

  163. </tr></table>
    164. 

  164.  </td>
    165. 

  165. </tr>
    166. 

  166. <tr>
    167. 

  167. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id" id="set_colour_id"></td>
    168. 

  168.  <td align="center">
    169. 

  169. <div id="ifMod_colour" style="display:none">
    170. 

  170. <table cellpadding="5" cellspacing="5">
    171. 

  171. <tr>
    172. 

  172.  <td>Set Colour ID: <input type="text" name="set_id" id="set_id" size="2" placeholder="Ex: 1"></td>
    173. 

  173. </tr></table>
    174. 

  174. </div>
    175. 

  175. </td>
    176. 

  176. </tr>
    177. 

  177. <tr>
    178. 

  178.  <td align="right">Debug: <input type="checkbox" name="verbose2" id="verbose2"></td>
    179. 

  179.  <td><center><input type="submit" class="button" value="Train!" onclick="TrainCaptchas()"></center></td>
    180. 

  180. </tr>
    181. 

  181. </table>
    182. 

  182. </div>
    183. 

  183. <div id="ifCrack" style="display:none">
    184. 

  184. <table border="1" cellpadding="5" cellspacing="5">
    185. 

  185. <tr>
    186. 

  186.  <td><center>
    187. 

  187. LOCAL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_local"/ CHECKED>
    188. 

  188. URL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_url"/>
    189. 

  189.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    190. 

  190. </center></td>
    191. 

  191. <td>
    192. 

  192. <div id="ifCrackLocal" style="display:none">
    193. 

  193. <center>
    194. 

  194. <table cellpadding="5" cellspacing="5">
    195. 

  195. <tr>
    196. 

  196.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    197. 

  197.     <input type='text' size="43" name='SourceFile2' id='SourceFile2' placeholder="Ex: inputs/test1.gif"></form></center></td>
    198. 

  198. </tr>
    199. 

  199. </table>
    200. 

  200. </center>
    201. 

  201. </div>
    202. 

  202. <div id="ifCrackUrl" style="display:none">
    203. 

  203. <table cellpadding="5" cellspacing="5">
    204. 

  204. <tr>
    205. 

  205.  <td><center><input type="text" name="crack_url" id="crack_url" size="43" placeholder="Brute force using local dictionary (from: 'dictionary/')"></center></td>
    206. 

  206.  <td><center>TOR: <input type="checkbox" name="tor3" id="tor3"></center></td>
    207. 

  207. </tr>
    208. 

  208. </table>
    209. 

  209. </div>
    210. 

  210. </td>
    211. 

  211. </tr>
    212. 

  212. <tr>
    213. 

  213.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetCrackModule();" name="set_module_crack" id="set_module_crack"></td>
    214. 

  214.  <td>
    215. 

  215. 

  216. <table>
    217. 

  217.  <tr>
    218. 

  218.   <td align="center">
    219. 

  219. <div id="ifMod_set_crack" style="display:none">
    220. 

  220. 

  221. <table cellpadding="5" cellspacing="5">
    222. 

  222.  <tr>
    223. 

  223.  <td>Name: <input type="text" name="use_mod_crack" id="use_mod_crack" size="12" placeholder="Ex: 'easy'"></td>
    224. 

  224.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    225. 

  225. </tr></table>
    226. 

  226. </div>
    227. 

  227.  </td>
    228. 

  228. </tr></table>
    229. 

  229.  </td>
    230. 

  230. </tr>
    231. 

  231. <tr>
    232. 

  232. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id3" id="set_colour_id3"></td>
    233. 

  233.  <td align="center">
    234. 

  234. <div id="ifMod_colour2" style="display:none">
    235. 

  235. <table cellpadding="5" cellspacing="5">
    236. 

  236. <tr>
    237. 

  237.  <td>Set Colour ID: <input type="text" name="set_id3" id="set_id3" size="2" placeholder="Ex: 1"></td>
    238. 

  238. </tr></table>
    239. 

  239. </div>
    240. 

  240. </td>
    241. 

  241. </tr>
    242. 

  242. <tr>
    243. 

  243. <td align="right">Export to XML: <input type="checkbox" onclick="javascript:SetXML();" name="set_xml" id="set_xml"></td>
    244. 

  244.  <td align="center">
    245. 

  245. <div id="ifMod_xml" style="display:none">
    246. 

  246. <table cellpadding="5" cellspacing="5">
    247. 

  247. <tr>
    248. 

  248.  <td>Filename: <input type="text" name="set_xml_file" id="set_xml_file" size="16" placeholder="Ex: php-captcha.xml"></td>
    249. 

  249. </tr></table>
    250. 

  250. </div>
    251. 

  251. </td>
    252. 

  252. </tr>
    253. 

  253. <tr>
    254. 

  254.  <td align="right">Debug: <input type="checkbox" name="verbose3" id="verbose3"></td>
    255. 

  255.  <td><center><input type="submit" class="button" value="Crack it!" onclick="CrackCaptchas()"></center></td>
    256. 

  256. </tr>
    257. 

  257. </table>
    258. 

  258. </div>
    259. 

  259. </center></td>
    260. 

  260.  </tr>
    261. 

  261. </table>
    262. 

  262. 

  263. <table cellpadding="5" cellspacing="5">
    264. 

  264.   <tr>
    265. 

  265.    <td>
    266. 

  266.       <div id="Results" style="display:none"><table width="100%" border="1" cellpadding="5" cellspacing="5"><th>Shell Info:<tr><td><div id="cmdOut"></div></td></tr></table></div>
    267. 

  267.    </td>
    268. 

  268.    </tr>
    269. 

  269.  <tr>
    270. 

  270.    <td align="center">
    271. 

  271.       <div id="Captcha-IN" style="display:none"><table border="1" width="100%" cellpadding="5" cellspacing="5"><th>Captcha Preview:<tr><td><center><img id="target_captcha_img_path" name="target_captcha_img_path" src=''></center></td></tr></table></div>
    272. 

  272.    </td>
    273. 

  273.  </tr>
    274. 

  274.   <tr>
    275. 

  275.    <td>
    276. 

  276.      <div id="OCR-out" style="display:none">
    277. 

  277.      <table width="100%" height="100%" border="1"><th>OCR Output:<tr>
    278. 

  278.     <td><iframe frameborder="0" id="directory-words" name="directory-words" width="800px" height="300px" src="directory-words"></iframe></td>
    279. 

  279.        </tr></table>
    280. 

  280.      </div>
    281. 

  281.   </td>
    282. 

  282.   </tr>
    283. 

  283. </table>
    284. 

  284. </center>
    285. 

  285. <br /><br/>
    286. 

  286. """ + self.pages["/footer"]
    287. 

  287. 

  288.         self.pages["/directory-words"] ="""<!DOCTYPE html><html><head><meta http-equiv="Content-type" content="text/html;charset=UTF-8"><script type="text/javascript" src="/lib.js"></script>
    289. 

  289. <script language="javascript">
    290. 

  290. function AddAll(){
    291. 

  291. var inputs = document.getElementsByClassName('word'),
    292. 

  292.     ws = [].map.call(inputs, function( input ) {
    293. 

  293.       return input.id;
    294. 

  294.     }).join("-");
    295. 

  295. var array = ws.split('-');
    296. 

  296. var arrayLength = array.length;
    297. 

  297. for (var i = 0; i < arrayLength; i++) {
    298. 

  298.     word = array[i];
    299. 

  299.     letter = document.getElementById(word).value;
    300. 

  300.     if(letter == ""){
    301. 

  301.      window.alert("You need to enter ALL dictionary symbols");
    302. 

  302.      return
    303. 

  303.     }
    304. 

  304.     if(word == ""){
    305. 

  305.      word = "off";
    306. 

  306.     }else{
    307. 

  307.      var w = word.substring(word.lastIndexOf('_')+1);
    308. 

  308.      w = "images/previews/ocr/" + w;
    309. 

  309.      params="symbol="+escape(w)+"&letter="+escape(letter);
    310. 

  310.     }
    311. 

  311.     runCommandX("cmd_move_ocr",params);
    312. 

  312.     var s = word.substring(word.lastIndexOf('_')+1);
    313. 

  313.     document.getElementById(s).style.display = "none";
    314. 

  314.   }
    315. 

  315. document.getElementById("adding").style.display = "none";
    316. 

  316. document.getElementById("AddAll").style.display = "none";
    317. 

  317. }
    318. 

  318. function Reload(word){
    319. 

  319. var w = word.substring(word.lastIndexOf('/')+1);
    320. 

  320. document.getElementById(w).style.display = "none";
    321. 

  321. document.getElementById("discarding").style.display = "none";
    322. 

  322. }
    323. 

  323. function Reload_Added(word){
    324. 

  324. var w = word.substring(word.lastIndexOf('/')+1);
    325. 

  325. document.getElementById(w).style.display = "none";
    326. 

  326. document.getElementById("adding").style.display = "none";
    327. 

  327. }
    328. 

  328. function MoveOCR(word) {
    329. 

  329. var w = word.substring(word.lastIndexOf('/')+1);
    330. 

  330. symbol = "letter_" + w
    331. 

  331. letter = document.getElementById(symbol).value;
    332. 

  332. if(letter == ""){
    333. 

  333.  window.alert("You need to enter a valid dictionary symbol (Ex: p)");
    334. 

  334.  return
    335. 

  335. }
    336. 

  336. if(word == ""){
    337. 

  337.  word = "off";
    338. 

  338. }else{
    339. 

  339. params="symbol="+escape(word)+"&letter="+escape(letter);
    340. 

  340. }
    341. 

  341. runCommandX("cmd_move_ocr",params);
    342. 

  342. setTimeout(function() { Reload_Added(word) }, 2000); // delay 2
    343. 

  343. }
    344. 

  344. function RemoveOCR(word) {
    345. 

  345. if(word == ""){
    346. 

  346.  word = "off";
    347. 

  347. }else{
    348. 

  348. params="symbol="+escape(word);
    349. 

  349. }
    350. 

  350. runCommandX("cmd_remove_ocr",params);
    351. 

  351. setTimeout(function() { Reload(word) }, 2000); // delay 2
    352. 

  352. }
    353. 

  353. </script>
    354. 

  354. <script language="javascript">function ViewWord(word) {window.open(word,"_blank","fulscreen=no, titlebar=yes, top=180, left=320, width=720, height=460, resizable=yes", false);}</script></head><body><table width='100%'><tr><td align='center'><font color='white'><div id="cmdOut"></div></font></td></tr><tr><td><br><center><a href='javascript:runCommandX("cmd_dict");'><font color="cyan"><u>View Dictionary Info</u></font></a></center></td></tr><tr><td>"""+str("".join(self.list_words()))+"""</td></tr></table><br><div align='center' style='display:block;' id='AddAll'> <button onclick='AddAll()'>ADD ALL!</button></div></body></html>"""
    355. 

  355. 

  356.         self.pages["/lib.js"] = """function loadXMLDoc() {
    357. 

  357.         var xmlhttp;
    358. 

  358.         if (window.XMLHttpRequest) {
    359. 

  359.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    360. 

  360.                 xmlhttp = new XMLHttpRequest();
    361. 

  361.         } else {
    362. 

  362.                 // code for IE6, IE5
    363. 

  363.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    364. 

  364.         }
    365. 

  365.         xmlhttp.onreadystatechange = function() {
    366. 

  366.                 if (xmlhttp.readyState == 4 ) {
    367. 

  367.                    if(xmlhttp.status == 200){
    368. 

  368.                            document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    369. 

  369.                            setTimeout("loadXMLDoc()", 3000); 
    370. 

  370.                    }
    371. 

  371.                 }
    372. 

  372.         }
    373. 

  373.         xmlhttp.send();
    374. 

  374. }
    375. 

  375. 

  376. function runCommandX(cmd,params) {
    377. 

  377.         var xmlhttp;
    378. 

  378.         if (window.XMLHttpRequest) {
    379. 

  379.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    380. 

  380.                 xmlhttp = new XMLHttpRequest();
    381. 

  381.         } else {
    382. 

  382.                 // code for IE6, IE5
    383. 

  383.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    384. 

  384.         }
    385. 

  385.         xmlhttp.onreadystatechange = function() {
    386. 

  386.                 if (xmlhttp.readyState == 4 ) {
    387. 

  387.                    if(xmlhttp.status == 200){
    388. 

  388. 								if(cmd.indexOf("?")!=-1){
    389. 

  389. 									s=cmd.split("?")
    390. 

  390. 									cmd=s[0]
    391. 

  391. 									params=s[1]
    392. 

  392. 								}
    393. 

  393.                                 document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    394. 

  394.                                 //document.getElementById("cmdOut").scrollIntoView();
    395. 

  395.                                 newcmd=cmd
    396. 

  396.                                 if(newcmd=="cmd_remove_ocr" || newcmd=="cmd_move_ocr" || newcmd=="cmd_dict"){ //do not refresh
    397. 

  397.                                     return;
    398. 

  398.                                 } else {
    399. 

  399.                                 if(newcmd=="cmd_list" || newcmd=="cmd_track" || newcmd == "cmd_tracklist" || newcmd=="cmd_crack" || newcmd=="cmd_train") newcmd=newcmd+"_update"
    400. 

  400. 								//do not refresh if certain text on response is found
    401. 

  401. 								if(newcmd.match(/update/) && 
    402. 

  402. 			 					(
    403. 

  403.                                                                   xmlhttp.responseText.match(/Number of tracked captchas/) ||
    404. 

  404.                                                                   xmlhttp.responseText.match(/to the correct folder/) ||
    405. 

  405.                                                                   xmlhttp.responseText.match(/by the moment/) ||
    406. 

  406.                                                                   xmlhttp.responseText.match(/Is that captcha supported?/) ||
    407. 

  407.                                                                   xmlhttp.responseText.match(/module not found/) ||
    408. 

  408.                                                                   xmlhttp.responseText.match(/No idea/) ||
    409. 

  409.                                                                   xmlhttp.responseText.match(/Possible Solution/) ||
    410. 

  410.                                                                   xmlhttp.responseText.match(/Internal problems/) ||
    411. 

  411. 								  xmlhttp.responseText.match(/List end/)
    412. 

  412. 										) 
    413. 

  413. 											) return;
    414. 

  414.                                 setTimeout(function(){runCommandX(newcmd,params)}, 3000);
    415. 

  415. 								return;}
    416. 

  416.                    }
    417. 

  417.                 }
    418. 

  418.         }
    419. 

  419. 		if(typeof params != "undefined") cmd=cmd+"?"+params
    420. 

  420.         xmlhttp.open("GET", cmd, true);
    421. 

  421.         xmlhttp.send();
    422. 

  422. }
    423. 

  423. """
    424. 

  424.     def list_words(self):
    425. 

  425.         m = []
    426. 

  426.         t = os.listdir("outputs/words")
    427. 

  427.         for f in t:
    428. 

  428.             ocr_preview = "<br><table style='display:block;' id='"+f+"' name='"+f+"' border='1' width='100%' cellpadding='5' cellspacing='5'><tr><td align='left' width='100%'><font color='cyan'><u><a onclick=javascript:ViewWord('images/previews/ocr/"+f+"');return false;>"+f+"</a></u></td><td align='center'><a onclick=javascript:ViewWord('images/previews/ocr/"+f+"');return false;><img border='1' style='border-color:red;' src='images/previews/ocr/"+f+"'></a></font></td><td align='center'><input type='text' class='word' name='letter_"+f+"' id='letter_"+f+"' size='2'></td><td align='center'><input type='submit' class='button' value='ADD!' onclick=javascript:MoveOCR('images/previews/ocr/"+f+"');return false;></td><td align='center'><input type='submit' class='button' value='Discard...' onclick=javascript:RemoveOCR('images/previews/ocr/"+f+"');return false;></td></tr></table>"
    429. 

  429.             m.append(ocr_preview)
    430. 

  430.         return m
    431. 

  431. 

  432.     def convert_size(self, size):
    433. 

  433.         import math
    434. 

  434.         if (size == 0):
    435. 

  435.             return '0B'
    436. 

  436.         size_name = ("B", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB")
    437. 

  437.         i = int(math.floor(math.log(size,1024)))
    438. 

  438.         p = math.pow(1024,i)
    439. 

  439.         s = round(size/p,2)
    440. 

  440.         return '%s %s' % (s,size_name[i])
    441. 

  441. 

  442.     def buildGetParams(self, request):
    443. 

  443.         params = {}
    444. 

  444.         path = re.findall("^GET ([^\s]+)", request)
    445. 

  445.         if path:
    446. 

  446.             path = path[0]
    447. 

  447.             start = path.find("?")
    448. 

  448.             if start != -1:
    449. 

  449.                 for param in path[start+1:].split("&"):
    450. 

  450.                     f = param.split("=")
    451. 

  451.                     if len(f) == 2:
    452. 

  452.                         var = f[0]
    453. 

  453.                         value = f[1]
    454. 

  454.                         value = value.replace("+", " ")
    455. 

  455.                         value = urllib.unquote(value)
    456. 

  456.                         params[var] = value
    457. 

  457.         return params
    458. 

  458. 

  459.     def get(self, request):
    460. 

  460.         cmd_options = ""
    461. 

  461.         runcmd = ""
    462. 

  462.         res = re.findall("^GET ([^\s]+)", request)
    463. 

  463.         if res is None:
    464. 

  464.             return
    465. 

  465.         pGet = {}
    466. 

  466.         page = res[0]
    467. 

  467.         paramStart = page.find("?")
    468. 

  468.         if paramStart != -1:
    469. 

  469.             page = page[:paramStart]
    470. 

  470.             pGet = self.buildGetParams(request)
    471. 

  471.         if page.startswith("/images/") or page.startswith("/js/") or page.startswith("/inputs/"):
    472. 

  472.             if os.path.exists("core/"+page[1:]):
    473. 

  473.                 f=open("core/"+page[1:])
    474. 

  474.                 self.pages[page]=f.read()
    475. 

  475.         if page == "/cmd_dict": # view dictionary info
    476. 

  476.             path, dirs, files = os.walk("dictionary/").next()
    477. 

  477.             total_dirs = len(dirs)
    478. 

  478.             total_files = len(files)
    479. 

  479.             size = 0
    480. 

  480.             for d in dirs:
    481. 

  481.                 path, dirs, files = os.walk("dictionary/"+d).next()
    482. 

  482.                 total_files = total_files + len(files)
    483. 

  483.                 for f in files:
    484. 

  484.                     size += os.path.getsize("dictionary/"+d+"/"+f)
    485. 

  485.             size = self.convert_size(size)
    486. 

  486.             last_update = time.ctime(os.path.getctime("dictionary/"))
    487. 

  487.             self.pages["/cmd_dict"] = "<table align='center' border='1' cellspacing='5' cellpadding='5'><tr><td><u>Creation Date:</u></td><td><u>Size:</u></td><td><u>Total Words:</u></td><td><u>Total Symbols:</u></td></tr><tr><td align='center'>"+str(last_update)+"</td><td align='center'>"+str(size)+"</td><td align='center'>"+str(total_dirs)+"</td><td align='center'>"+str(total_files)+"</td></tr></table>"
    488. 

  488.         if page == "/cmd_remove_ocr": # remove ocr image from previews
    489. 

  489.             if not pGet["symbol"]=="off":
    490. 

  490.                 self.pages["/cmd_remove_ocr"] = "<div style='display:block' id='discarding' name='discarding'><pre>[Info] Discarding image from previews...</pre></div>"
    491. 

  491.                 symbol = pGet["symbol"]
    492. 

  492.                 try:
    493. 

  493.                     os.remove("core/" + symbol)
    494. 

  494.                 except:
    495. 

  495.                     pass
    496. 

  496.         if page == "/cmd_move_ocr": # move ocr image from previews to dictionary
    497. 

  497.             if not pGet["symbol"]=="off":
    498. 

  498.                 self.pages["/cmd_move_ocr"] = "<div style='display:block' id='adding' name='adding'><pre>[Info] Adding image from previews to dictionary...</pre></div>"
    499. 

  499.                 symbol = pGet["symbol"]
    500. 

  500.                 letter = pGet["letter"]
    501. 

  501.                 o = "core/" + symbol
    502. 

  502.                 d = "dictionary/" + letter
    503. 

  503.                 try:
    504. 

  504.                     if not os.path.exists(d):
    505. 

  505.                         os.makedirs(d)
    506. 

  506.                     head, tail = os.path.split(symbol)
    507. 

  507.                     final = d + "/" + tail
    508. 

  508.                     copyfile(o, final) # copy file to letter on dictionary
    509. 

  509.                     os.remove(o) # purge from previews
    510. 

  510.                 except:
    511. 

  511.                     pass
    512. 

  512.         if page == "/cmd_list": # list mods
    513. 

  513.             self.pages["/cmd_list"] = "<pre>Waiting for a list of available modules...</pre>"
    514. 

  514.             runcmd = "(python -i cintruder --mods-list "+ "|tee /tmp/out) &"
    515. 

  515.         if page == "/cmd_list_update":
    516. 

  516.             if not os.path.exists('/tmp/out'):
    517. 

  517.                 open('/tmp/out', 'w').close()
    518. 

  518.             with open('/tmp/out', 'r') as f:
    519. 

  519.                 self.pages["/cmd_list_update"] = "<pre>"+f.read()+"<pre>"
    520. 

  520.         if page == "/cmd_track": # tracking
    521. 

  521.             self.pages["/cmd_track"] = "<pre>Waiting for tracking results...</pre>"
    522. 

  522.             if pGet["tor"]=="on": 
    523. 

  523.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    524. 

  524.             if pGet["verbose"]=="on": 
    525. 

  525.                 cmd_options = cmd_options + "--verbose "
    526. 

  526.             runcmd = "(python -i cintruder --track '"+pGet["tracking_source"]+"' --track-num '"+pGet["tracking_num"]+"' " + cmd_options + "|tee /tmp/out) &"
    527. 

  527.         if page == "/cmd_track_update":
    528. 

  528.             if not os.path.exists('/tmp/out'):
    529. 

  529.                 open('/tmp/out', 'w').close()
    530. 

  530.             with open('/tmp/out', 'r') as f:
    531. 

  531.                 self.pages["/cmd_track_update"] = "<pre>"+f.read()+"<pre>"
    532. 

  532.         if page == "/cmd_tracklist": # list last tracks
    533. 

  533.             self.pages["/cmd_tracklist"] = "<pre>Waiting for a list of last tracks...</pre>"
    534. 

  534.             runcmd = "(python -i cintruder --tracked-list "+ "|tee /tmp/out) &"
    535. 

  535.         if page == "/cmd_tracklist_update":
    536. 

  536.             if not os.path.exists('/tmp/out'):
    537. 

  537.                 open('/tmp/out', 'w').close()
    538. 

  538.             with open('/tmp/out', 'r') as f:
    539. 

  539.                 self.pages["/cmd_tracklist_update"] = "<pre>"+f.read()+"<pre>"
    540. 

  540.         if page == "/cmd_train": # training
    541. 

  541.             self.pages["/cmd_train"] = "<pre>Waiting for training results...</pre>"
    542. 

  542.             if pGet["tor"]=="on": 
    543. 

  543.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    544. 

  544.             if pGet["verbose"]=="on": 
    545. 

  545.                 cmd_options = cmd_options + "--verbose "
    546. 

  546.             if not pGet["colourID"]=="off":
    547. 

  547.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    548. 

  548.             if not pGet["module"]=="off": 
    549. 

  549.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    550. 

  550.             if pGet["source_file"]=="off": # from remote url source
    551. 

  551.                 runcmd = "(python -i cintruder --train '"+pGet["train_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    552. 

  552.             else: # from local source 
    553. 

  553.                 source_file = pGet["source_file"]
    554. 

  554.                 runcmd = "(python -i cintruder --train '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    555. 

  555.         if page == "/cmd_train_update":
    556. 

  556.             if not os.path.exists('/tmp/out'):
    557. 

  557.                 open('/tmp/out', 'w').close()
    558. 

  558.             with open('/tmp/out', 'r') as f:
    559. 

  559.                 self.pages["/cmd_train_update"] = "<pre>"+f.read()+"<pre>"
    560. 

  560.         if page == "/cmd_crack": # cracking
    561. 

  561.             self.pages["/cmd_crack"] = "<pre>Waiting for cracking (bruteforcing) results...</pre>"
    562. 

  562.             if pGet["tor"]=="on":
    563. 

  563.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    564. 

  564.             if pGet["verbose"]=="on":
    565. 

  565.                 cmd_options = cmd_options + "--verbose "
    566. 

  566.             if not pGet["colourID"]=="off":
    567. 

  567.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    568. 

  568.             if not pGet["module"]=="off":
    569. 

  569.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    570. 

  570.             if not pGet["xml"]=="off":
    571. 

  571.                 cmd_options = cmd_options + "--xml='" + pGet["xml"] + "' "
    572. 

  572.             if pGet["source_file"]=="off": # from remote url source
    573. 

  573.                 runcmd = "(python -i cintruder --crack '"+pGet["crack_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    574. 

  574.             else: # from local source 
    575. 

  575.                 source_file = pGet["source_file"]
    576. 

  576.                 runcmd = "(python -i cintruder --crack '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    577. 

  577.         if page == "/cmd_crack_update":
    578. 

  578.             if not os.path.exists('/tmp/out'):
    579. 

  579.                 open('/tmp/out', 'w').close()
    580. 

  580.             with open('/tmp/out', 'r') as f:
    581. 

  581.                 self.pages["/cmd_crack_update"] = "<pre>"+f.read()+"<pre>"
    582. 

  582.         ctype = "text/html"
    583. 

  583.         if page.find(".js") != -1:
    584. 

  584.             ctype = "text/javascript"
    585. 

  585.         elif page.find(".txt") != -1:
    586. 

  586.             ctype = "text/plain"
    587. 

  587.         elif page.find(".ico") != -1:
    588. 

  588.             ctype = "image/x-icon"
    589. 

  589.         elif page.find(".png") != -1:
    590. 

  590.             ctype = "image/png"
    591. 

  591.         elif page.find(".jpeg") != -1:
    592. 

  592.             ctype = "image/jpeg"
    593. 

  593.         elif page.find(".jpg") != -1:
    594. 

  594.             ctype = "image/jpeg"
    595. 

  595.         elif page.find(".gif") != -1:
    596. 

  596.             ctype = "image/gif"
    597. 

  597.         if page in self.pages:
    598. 

  598.             return dict(run=runcmd, code="200 OK", html=self.pages[page], ctype=ctype)
    599. 

  599.         return dict(run=runcmd, code="404 Error", html="404 Error<br><br>Page not found...", ctype=ctype)
    600. 

  600. 

  601. class Command(object):
    602. 

  602.     def __init__(self, cmd):
    603. 

  603.         self.cmd = cmd
    604. 

  604.         self.process = None
    605. 

  605. 

  606.     def run(self, timeout):
    607. 

  607.         def target():
    608. 

  608.             self.process = subprocess.Popen(self.cmd, shell=True)
    609. 

  609.         thread = threading.Thread(target=target)
    610. 

  610.         thread.start()
    611. 

  611.         thread.join(timeout)
    612. 

  612.         if thread.is_alive():
    613. 

  613.             self.process.terminate()
    614. 

  614.             thread.join()
    615. 

  615. 

  616. if __name__ == "__main__":
    617. 

  617.     webbrowser.open('http://127.0.0.1:9999', new=1)
    618. 

  618.     tcpsock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    619. 

  619.     tcpsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
    620. 

  620.     tcpsock.bind((host, port))
    621. 

  621.     while True:
    622. 

  622.         tcpsock.listen(4)
    623. 

  623.         (clientsock, (ip, c_port)) = tcpsock.accept()
    624. 

  624.         newthread = ClientThread(ip, c_port, clientsock)
    625. 

  625.         newthread.start()
    626. 

  626.