Home Explore Help
Sign In
epsylon
/
cintruder
Watch 1
Star 0
Fork 0
Files Issues 0 Pull Requests 0
Tree: a87de5493c
Branches Tags
cintruder
/
core
/
webgui.py

webgui.py 28 KB
History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659 
  1. #!/usr/bin/python3
    2. 

  2. # -*- coding: iso-8859-15 -*-
    3. 

  3. """
    4. 

  4. This file is part of the cintruder project, https://cintruder.03c8.net
    5. 

  5. 

  6. Copyright (c) 2012/2020 psy <epsylon@riseup.net>
    7. 

  7. 

  8. cintruder is free software; you can redistribute it and/or modify it under
    9. 

  9. the terms of the GNU General Public License as published by the Free
    10. 

  10. Software Foundation version 3 of the License.
    11. 

  11. 

  12. cintruder is distributed in the hope that it will be useful, but WITHOUT ANY
    13. 

  13. WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    14. 

  14. FOR A PARTICULAR PURPOSE.  See the GNU General Public License for more
    15. 

  15. details.
    16. 

  16. 

  17. You should have received a copy of the GNU General Public License along
    18. 

  18. with cintruder; if not, write to the Free Software Foundation, Inc., 51
    19. 

  19. Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
    20. 

  20. """
    21. 

  21. import socket, threading, re, base64, os, time
    22. 

  22. import webbrowser, subprocess, json, sys
    23. 

  23. try:
    24. 

  24.     from urlparse import urlparse
    25. 

  25. except:
    26. 

  26.     import urllib.request, urllib.parse, urllib.error
    27. 

  27. from .options import CIntruderOptions
    28. 

  28. from pprint import pprint
    29. 

  29. from shutil import copyfile
    30. 

  30. 

  31. host = "0.0.0.0"
    32. 

  32. port = 9999
    33. 

  33. 

  34. class ClientThread(threading.Thread):
    35. 

  35.     def __init__(self, ip, port, socket):
    36. 

  36.         threading.Thread.__init__(self)
    37. 

  37.         self.ip = ip
    38. 

  38.         self.port = port
    39. 

  39.         self.socket = socket
    40. 

  40.         self.pages = Pages()
    41. 

  41. 

  42.     def run(self):
    43. 

  43.         req = self.socket.recv(2048)
    44. 

  44.         res = self.pages.get(req)
    45. 

  45.         if res is None:
    46. 

  46.             self.socket.close()
    47. 

  47.             return
    48. 

  48.         out = "HTTP/1.0 %s\r\n" % res["code"]
    49. 

  49.         out += "Pragma: no-cache\n"
    50. 

  50.         out += "Expires: Fri, 30 Oct 1998 00:00:01 GMT\n"
    51. 

  51.         out += "Cache-Control: no-cache, must-revalidate\n"
    52. 

  52.         out += "Content-Type: %s\r\n\r\n" % res["ctype"]
    53. 

  53.         out += "%s" % res["html"]
    54. 

  54.         try:
    55. 

  55.             self.socket.send(out.encode('utf-8'))
    56. 

  56.         except:
    57. 

  57.             self.socket.send(out)
    58. 

  58.         self.socket.close()
    59. 

  59.         if "run" in res and len(res["run"]):
    60. 

  60.             subprocess.Popen(res["run"], shell=True)
    61. 

  61. 

  62. class Pages():
    63. 

  63.     def __init__(self):
    64. 

  64.         self.options = CIntruderOptions()
    65. 

  65.         self.pages = {}
    66. 

  66.         cintruder_img = open("core/images/cintruder.txt").read() #base64 logo
    67. 

  67.         if not os.path.exists("outputs/words/"): 
    68. 

  68.             os.mkdir("outputs/words/")
    69. 

  69. 

  70.         self.pages["/header"] = """
    71. 

  71. <!DOCTYPE html><html>
    72. 

  72. <head>
    73. 

  73. <meta name="author" content="psy">
    74. 

  74. <meta name="robots" content="noindex, nofollow">
    75. 

  75. <meta http-equiv="content-type" content="text/xml; charset=utf-8" /> 
    76. 

  76. <title>CINTRUDER: OCR Bruteforcing Toolkit</title>
    77. 

  77. <script type="text/javascript" src="/lib.js"></script>
    78. 

  78. <script src="js/web.js" type="text/javascript"></script>
    79. 

  79. <style>
    80. 

  80. a:link {
    81. 

  81.     color: cyan;
    82. 

  82. }
    83. 

  83. a:visited {
    84. 

  84.     color: black;
    85. 

  85. }
    86. 

  86. </style>
    87. 

  87. <style>
    88. 

  88. input.button {
    89. 

  89.     width: 20em;  height: 2em;
    90. 

  90. }
    91. 

  91. </style>
    92. 

  92. """
    93. 

  93.         self.pages["/footer"] = """</body>
    94. 

  94. </html>
    95. 

  95. """
    96. 

  96.         self.pages["/"] = self.pages["/header"] + """
    97. 

  97. <script>loadXMLDoc()</script></head><body bgcolor="blue" text="white" style="monospace;font-size:14px;" >
    98. 

  98. <center>
    99. 

  99. <table border="1" cellpadding="10" cellspacing="5" width="90%">
    100. 

  100.  <tr>
    101. 

  101.  <td bgcolor="white"><center><a href="https://cintruder.03c8.net" target="_blank"><img src='data:image/png;base64,"""+str(cintruder_img)+"""'></a></center></td>
    102. 

  102.  <td>
    103. 

  103. <center><h3><a href="https://github.com/epsylon/cintruder" target="_blank">CINTRUDER</a> is an automatic pentesting tool to bypass <a href="https://en.wikipedia.org/wiki/CAPTCHA" target="_blank">captchas</a><br/><br/>
    104. 

  104. Contact: psy (<a href="mailto:epsylon@riseup.net">epsylon@riseup.net</a>) - [<a href="https://03c8.net" target="_blank">03c8.net</a>]<br><br>
    105. 

  105. License: <a href="https://www.gnu.org/licenses/quick-guide-gplv3.pdf" target="_blank">GPLv3</a> | Donate: <a href="https://blockchain.info/address/19aXfJtoYJUoXEZtjNwsah2JKN9CK5Pcjw" target="_blank">BTC</a></h3></center>
    106. 

  106. </td>
    107. 

  107.  </tr></table><br/>
    108. 

  108. <table cellpadding="10" cellspacing="5" width="90%">
    109. 

  109.   <tr>
    110. 

  110.    <td width="315px">
    111. 

  111. <center>
    112. 

  112. <table border="1" cellpadding="10" cellspacing="5">
    113. 

  113. <tr>
    114. 

  114.  <td>
    115. 

  115. Track: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="track"/ CHECKED>
    116. 

  116. Train: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="train"/>
    117. 

  117. Crack: <input type="radio" onclick="javascript:OptionsCheck();" name="options" id="crack"/>
    118. 

  118.  </td>
    119. 

  119. </tr></table>
    120. 

  120. </center>
    121. 

  121. </td>
    122. 

  122.    <td><center>
    123. 

  123. <div id="ifTrack" style="display:none">
    124. 

  124. <table border="1" cellpadding="10" cellspacing="5">
    125. 

  125. <tr>
    126. 

  126.  <td><center><input type="text" name="track_url" id="track_url" size="43" placeholder="Download captchas from url (to: 'inputs/')"></center></td>
    127. 

  127.  <td><center>Num: <input type="text" name="track_num" id="track_num" size="2" value="5"></center></td>
    128. 

  128.  <td><center>TOR: <input type="checkbox" id="tor" name="tor"></center></td>
    129. 

  129.  <td align="right">Debug: <input type="checkbox" name="verbose" id="verbose"></td>
    130. 

  130.  <td><center><input type="submit" value="Download!" onclick="TrackCaptchas()"></center></td>
    131. 

  131. </tr></table>
    132. 

  132. </div>
    133. 

  133. <div id="ifTrain" style="display:none">
    134. 

  134. <table border="1" cellpadding="5" cellspacing="5">
    135. 

  135. <tr>
    136. 

  136.  <td><center>
    137. 

  137. LOCAL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_local"/ CHECKED>
    138. 

  138. URL: <input type="radio" onclick="javascript:TrainSourcesCheck();" name="training_sources" id="training_url"/>
    139. 

  139.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    140. 

  140. </center></td>
    141. 

  141. <td>
    142. 

  142. <div id="ifLocal" style="display:none">
    143. 

  143. <center>
    144. 

  144. <table cellpadding="5" cellspacing="5">
    145. 

  145. <tr>
    146. 

  146.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    147. 

  147.     <input type='text' size="43" name='SourceFile' id='SourceFile' placeholder="Ex: inputs/test1.gif"></form></center></td>
    148. 

  148. </tr></table>
    149. 

  149. </center>
    150. 

  150. </div>
    151. 

  151. <div id="ifUrl" style="display:none">
    152. 

  152. <table cellpadding="2" cellspacing="2">
    153. 

  153. <tr>
    154. 

  154.  <td><center><input type="text" name="train_url" id="train_url" size="43" placeholder="Apply common OCR techniques to a remote captcha"></center></td>
    155. 

  155.  <td><center>TOR: <input type="checkbox" name="tor2" id="tor2"></center></td>
    156. 

  156. </tr></table>
    157. 

  157. </div>
    158. 

  158. </td>
    159. 

  159. </tr>
    160. 

  160. <tr>
    161. 

  161.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetTrainModule();" name="set_module" id="set_module"></td>
    162. 

  162.  <td>
    163. 

  163. <table>
    164. 

  164.  <tr>
    165. 

  165.   <td align="center">
    166. 

  166. <div id="ifMod_set" style="display:none">
    167. 

  167. <table cellpadding="5" cellspacing="5">
    168. 

  168.  <tr>
    169. 

  169.  <td>Name: <input type="text" name="use_mod" id="use_mod" size="12" placeholder="Ex: 'easy'"></td>
    170. 

  170.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    171. 

  171. </tr></table>
    172. 

  172. </div>
    173. 

  173.  </td>
    174. 

  174. </tr></table>
    175. 

  175.  </td>
    176. 

  176. </tr>
    177. 

  177. <tr>
    178. 

  178. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id" id="set_colour_id"></td>
    179. 

  179.  <td align="center">
    180. 

  180. <div id="ifMod_colour" style="display:none">
    181. 

  181. <table cellpadding="5" cellspacing="5">
    182. 

  182. <tr>
    183. 

  183.  <td>Set Colour ID: <input type="text" name="set_id" id="set_id" size="2" placeholder="Ex: 1"></td>
    184. 

  184. </tr></table>
    185. 

  185. </div>
    186. 

  186. </td>
    187. 

  187. </tr>
    188. 

  188. <tr>
    189. 

  189.  <td align="right">Debug: <input type="checkbox" name="verbose2" id="verbose2"></td>
    190. 

  190.  <td><center><input type="submit" class="button" value="Train!" onclick="TrainCaptchas()"></center></td>
    191. 

  191. </tr>
    192. 

  192. </table>
    193. 

  193. </div>
    194. 

  194. <div id="ifCrack" style="display:none">
    195. 

  195. <table border="1" cellpadding="5" cellspacing="5">
    196. 

  196. <tr>
    197. 

  197.  <td><center>
    198. 

  198. LOCAL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_local"/ CHECKED>
    199. 

  199. URL: <input type="radio" onclick="javascript:CrackingCheck();" name="cracking_sources" id="cracking_url"/>
    200. 

  200.  <br><br><a href='javascript:runCommandX("cmd_tracklist");javascript:showResults()'>List Last Tracked</a><br><br>
    201. 

  201. </center></td>
    202. 

  202. <td>
    203. 

  203. <div id="ifCrackLocal" style="display:none">
    204. 

  204. <center>
    205. 

  205. <table cellpadding="5" cellspacing="5">
    206. 

  206. <tr>
    207. 

  207.  <td><center><form action='' method='POST' enctype='multipart/form-data'>
    208. 

  208.     <input type='text' size="43" name='SourceFile2' id='SourceFile2' placeholder="Ex: inputs/test1.gif"></form></center></td>
    209. 

  209. </tr>
    210. 

  210. </table>
    211. 

  211. </center>
    212. 

  212. </div>
    213. 

  213. <div id="ifCrackUrl" style="display:none">
    214. 

  214. <table cellpadding="5" cellspacing="5">
    215. 

  215. <tr>
    216. 

  216.  <td><center><input type="text" name="crack_url" id="crack_url" size="43" placeholder="Brute force using local dictionary (from: 'dictionary/')"></center></td>
    217. 

  217.  <td><center>TOR: <input type="checkbox" name="tor3" id="tor3"></center></td>
    218. 

  218. </tr>
    219. 

  219. </table>
    220. 

  220. </div>
    221. 

  221. </td>
    222. 

  222. </tr>
    223. 

  223. <tr>
    224. 

  224.   <td align="right">Use Module: <input type="checkbox" onclick="javascript:SetCrackModule();" name="set_module_crack" id="set_module_crack"></td>
    225. 

  225.  <td>
    226. 

  226. 

  227. <table>
    228. 

  228.  <tr>
    229. 

  229.   <td align="center">
    230. 

  230. <div id="ifMod_set_crack" style="display:none">
    231. 

  231. 

  232. <table cellpadding="5" cellspacing="5">
    233. 

  233.  <tr>
    234. 

  234.  <td>Name: <input type="text" name="use_mod_crack" id="use_mod_crack" size="12" placeholder="Ex: 'easy'"></td>
    235. 

  235.  <td><a href='javascript:runCommandX("cmd_list");javascript:showResults()'>List Modules</a></td>
    236. 

  236. </tr></table>
    237. 

  237. </div>
    238. 

  238.  </td>
    239. 

  239. </tr></table>
    240. 

  240.  </td>
    241. 

  241. </tr>
    242. 

  242. <tr>
    243. 

  243. <td align="right">Advanced OCR: <input type="checkbox" onclick="javascript:SetColourID();" name="set_colour_id3" id="set_colour_id3"></td>
    244. 

  244.  <td align="center">
    245. 

  245. <div id="ifMod_colour2" style="display:none">
    246. 

  246. <table cellpadding="5" cellspacing="5">
    247. 

  247. <tr>
    248. 

  248.  <td>Set Colour ID: <input type="text" name="set_id3" id="set_id3" size="2" placeholder="Ex: 1"></td>
    249. 

  249. </tr></table>
    250. 

  250. </div>
    251. 

  251. </td>
    252. 

  252. </tr>
    253. 

  253. <tr>
    254. 

  254. <td align="right">Export to XML: <input type="checkbox" onclick="javascript:SetXML();" name="set_xml" id="set_xml"></td>
    255. 

  255.  <td align="center">
    256. 

  256. <div id="ifMod_xml" style="display:none">
    257. 

  257. <table cellpadding="5" cellspacing="5">
    258. 

  258. <tr>
    259. 

  259.  <td>Filename: <input type="text" name="set_xml_file" id="set_xml_file" size="16" placeholder="Ex: php-captcha.xml"></td>
    260. 

  260. </tr></table>
    261. 

  261. </div>
    262. 

  262. </td>
    263. 

  263. </tr>
    264. 

  264. <tr>
    265. 

  265.  <td align="right">Debug: <input type="checkbox" name="verbose3" id="verbose3"></td>
    266. 

  266.  <td><center><input type="submit" class="button" value="Crack it!" onclick="CrackCaptchas()"></center></td>
    267. 

  267. </tr>
    268. 

  268. </table>
    269. 

  269. </div>
    270. 

  270. </center></td>
    271. 

  271.  </tr>
    272. 

  272. </table>
    273. 

  273. 

  274. <table cellpadding="5" cellspacing="5">
    275. 

  275.   <tr>
    276. 

  276.    <td>
    277. 

  277.       <div id="Results" style="display:none"><table width="100%" border="1" cellpadding="5" cellspacing="5"><th>Shell Info:<tr><td><div id="cmdOut"></div></td></tr></table></div>
    278. 

  278.    </td>
    279. 

  279.    </tr>
    280. 

  280.  <tr>
    281. 

  281.    <td align="center">
    282. 

  282.       <div id="Captcha-IN" style="display:none"><table border="1" width="100%" cellpadding="5" cellspacing="5"><th>Captcha Preview:<tr><td><center><img id="target_captcha_img_path" name="target_captcha_img_path" src=''></center></td></tr></table></div>
    283. 

  283.    </td>
    284. 

  284.  </tr>
    285. 

  285.   <tr>
    286. 

  286.    <td>
    287. 

  287.      <div id="OCR-out" style="display:none">
    288. 

  288.      <table width="100%" height="100%" border="1"><th>OCR Output:<tr>
    289. 

  289.     <td><iframe frameborder="0" id="directory-words" name="directory-words" width="800px" height="300px" src="directory-words"></iframe></td>
    290. 

  290.        </tr></table>
    291. 

  291.      </div>
    292. 

  292.   </td>
    293. 

  293.   </tr>
    294. 

  294. </table>
    295. 

  295. </center>
    296. 

  296. <br /><br/>
    297. 

  297. """ + self.pages["/footer"]
    298. 

  298. 

  299.         self.pages["/directory-words"] ="""<!DOCTYPE html><html><head><meta http-equiv="Content-type" content="text/html;charset=UTF-8"><script type="text/javascript" src="/lib.js"></script>
    300. 

  300. <script language="javascript">
    301. 

  301. function AddAll(){
    302. 

  302. var inputs = document.getElementsByClassName('word'),
    303. 

  303.     ws = [].map.call(inputs, function( input ) {
    304. 

  304.       return input.id;
    305. 

  305.     }).join("-");
    306. 

  306. var array = ws.split('-');
    307. 

  307. var arrayLength = array.length;
    308. 

  308. for (var i = 0; i < arrayLength; i++) {
    309. 

  309.     word = array[i];
    310. 

  310.     letter = document.getElementById(word).value;
    311. 

  311.     if(letter == ""){
    312. 

  312.      window.alert("You need to enter ALL dictionary symbols");
    313. 

  313.      return
    314. 

  314.     }
    315. 

  315.     if(word == ""){
    316. 

  316.      word = "off";
    317. 

  317.     }else{
    318. 

  318.      var w = word.substring(word.lastIndexOf('_')+1);
    319. 

  319.      w = "images/previews/ocr/" + w;
    320. 

  320.      params="symbol="+escape(w)+"&letter="+escape(letter);
    321. 

  321.     }
    322. 

  322.     runCommandX("cmd_move_ocr",params);
    323. 

  323.     var s = word.substring(word.lastIndexOf('_')+1);
    324. 

  324.     document.getElementById(s).style.display = "none";
    325. 

  325.   }
    326. 

  326. document.getElementById("adding").style.display = "none";
    327. 

  327. document.getElementById("AddAll").style.display = "none";
    328. 

  328. }
    329. 

  329. function Reload(word){
    330. 

  330. var w = word.substring(word.lastIndexOf('/')+1);
    331. 

  331. document.getElementById(w).style.display = "none";
    332. 

  332. document.getElementById("discarding").style.display = "none";
    333. 

  333. }
    334. 

  334. function Reload_Added(word){
    335. 

  335. var w = word.substring(word.lastIndexOf('/')+1);
    336. 

  336. document.getElementById(w).style.display = "none";
    337. 

  337. document.getElementById("adding").style.display = "none";
    338. 

  338. }
    339. 

  339. function MoveOCR(word) {
    340. 

  340. var w = word.substring(word.lastIndexOf('/')+1);
    341. 

  341. symbol = "letter_" + w
    342. 

  342. letter = document.getElementById(symbol).value;
    343. 

  343. if(letter == ""){
    344. 

  344.  window.alert("You need to enter a valid dictionary symbol (Ex: p)");
    345. 

  345.  return
    346. 

  346. }
    347. 

  347. if(word == ""){
    348. 

  348.  word = "off";
    349. 

  349. }else{
    350. 

  350. params="symbol="+escape(word)+"&letter="+escape(letter);
    351. 

  351. }
    352. 

  352. runCommandX("cmd_move_ocr",params);
    353. 

  353. setTimeout(function() { Reload_Added(word) }, 2000); // delay 2
    354. 

  354. }
    355. 

  355. function RemoveOCR(word) {
    356. 

  356. if(word == ""){
    357. 

  357.  word = "off";
    358. 

  358. }else{
    359. 

  359. params="symbol="+escape(word);
    360. 

  360. }
    361. 

  361. runCommandX("cmd_remove_ocr",params);
    362. 

  362. setTimeout(function() { Reload(word) }, 2000); // delay 2
    363. 

  363. }
    364. 

  364. </script>
    365. 

  365. <script language="javascript">function ViewWord(word) {window.open(word,"_blank","fulscreen=no, titlebar=yes, top=180, left=320, width=720, height=460, resizable=yes", false);}</script></head><body><table width='100%'><tr><td align='center'><font color='white'><div id="cmdOut"></div></font></td></tr><tr><td><br><center><a href='javascript:runCommandX("cmd_dict");'><font color="cyan"><u>View Dictionary Info</u></font></a></center></td></tr><tr><td>"""+str("".join(self.list_words()))+"""</td></tr></table><br><div align='center' style='display:block;' id='AddAll'> <button onclick='AddAll()'>ADD ALL!</button></div></body></html>"""
    366. 

  366. 

  367.         self.pages["/lib.js"] = """function loadXMLDoc() {
    368. 

  368.         var xmlhttp;
    369. 

  369.         if (window.XMLHttpRequest) {
    370. 

  370.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    371. 

  371.                 xmlhttp = new XMLHttpRequest();
    372. 

  372.         } else {
    373. 

  373.                 // code for IE6, IE5
    374. 

  374.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    375. 

  375.         }
    376. 

  376.         xmlhttp.onreadystatechange = function() {
    377. 

  377.                 if (xmlhttp.readyState == 4 ) {
    378. 

  378.                    if(xmlhttp.status == 200){
    379. 

  379.                            document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    380. 

  380.                            setTimeout("loadXMLDoc()", 3000); 
    381. 

  381.                    }
    382. 

  382.                 }
    383. 

  383.         }
    384. 

  384.         xmlhttp.send();
    385. 

  385. }
    386. 

  386. 

  387. function runCommandX(cmd,params) {
    388. 

  388.         var xmlhttp;
    389. 

  389.         if (window.XMLHttpRequest) {
    390. 

  390.                 // code for IE7+, Firefox, Chrome, Opera, Safari
    391. 

  391.                 xmlhttp = new XMLHttpRequest();
    392. 

  392.         } else {
    393. 

  393.                 // code for IE6, IE5
    394. 

  394.                 xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
    395. 

  395.         }
    396. 

  396.         xmlhttp.onreadystatechange = function() {
    397. 

  397.                 if (xmlhttp.readyState == 4 ) {
    398. 

  398.                    if(xmlhttp.status == 200){
    399. 

  399. 								if(cmd.indexOf("?")!=-1){
    400. 

  400. 									s=cmd.split("?")
    401. 

  401. 									cmd=s[0]
    402. 

  402. 									params=s[1]
    403. 

  403. 								}
    404. 

  404.                                 document.getElementById("cmdOut").innerHTML = xmlhttp.responseText;
    405. 

  405.                                 //document.getElementById("cmdOut").scrollIntoView();
    406. 

  406.                                 newcmd=cmd
    407. 

  407.                                 if(newcmd=="cmd_remove_ocr" || newcmd=="cmd_move_ocr" || newcmd=="cmd_dict"){ //do not refresh
    408. 

  408.                                     return;
    409. 

  409.                                 } else {
    410. 

  410.                                 if(newcmd=="cmd_list" || newcmd=="cmd_track" || newcmd == "cmd_tracklist" || newcmd=="cmd_crack" || newcmd=="cmd_train") newcmd=newcmd+"_update"
    411. 

  411. 								//do not refresh if certain text on response is found
    412. 

  412. 								if(newcmd.match(/update/) && 
    413. 

  413. 			 					(
    414. 

  414.                                                                   xmlhttp.responseText.match(/Number of tracked captchas/) ||
    415. 

  415.                                                                   xmlhttp.responseText.match(/to the correct folder/) ||
    416. 

  416.                                                                   xmlhttp.responseText.match(/by the moment/) ||
    417. 

  417.                                                                   xmlhttp.responseText.match(/Is that captcha supported?/) ||
    418. 

  418.                                                                   xmlhttp.responseText.match(/module not found/) ||
    419. 

  419.                                                                   xmlhttp.responseText.match(/No idea/) ||
    420. 

  420.                                                                   xmlhttp.responseText.match(/Possible Solution/) ||
    421. 

  421.                                                                   xmlhttp.responseText.match(/Internal problems/) ||
    422. 

  422. 								  xmlhttp.responseText.match(/List end/)
    423. 

  423. 										) 
    424. 

  424. 											) return;
    425. 

  425.                                 setTimeout(function(){runCommandX(newcmd,params)}, 3000);
    426. 

  426. 								return;}
    427. 

  427.                    }
    428. 

  428.                 }
    429. 

  429.         }
    430. 

  430. 		if(typeof params != "undefined") cmd=cmd+"?"+params
    431. 

  431.         xmlhttp.open("GET", cmd, true);
    432. 

  432.         xmlhttp.send();
    433. 

  433. }
    434. 

  434. """
    435. 

  435.     def list_words(self):
    436. 

  436.         m = []
    437. 

  437.         t = os.listdir("outputs/words")
    438. 

  438.         for f in t:
    439. 

  439.             try:
    440. 

  440.                 with open("core/images/previews/ocr/"+f,'rb') as img_f:
    441. 

  441.                     img = "data:image/gif;base64,"+base64.b64encode(img_f.read()).decode('utf-8')
    442. 

  442.             except:
    443. 

  443.                 img = ""
    444. 

  444.             ocr_preview = "<br><table style='display:block;' id='"+f+"' name='"+f+"' border='1' width='100%' cellpadding='5' cellspacing='5'><tr><td align='left' width='100%'><font color='cyan'><u><a onclick=javascript:ViewWord('"+img+"');return false;>"+f+"</a></u></td><td align='center'><a onclick=javascript:ViewWord('"+img+"');return false;><img border='1' style='border-color:red;' src='"+img+"'></a></font></td><td align='center'><input type='text' class='word' name='letter_"+f+"' id='letter_"+f+"' size='2'></td><td align='center'><input type='submit' class='button' value='ADD!' onclick=javascript:MoveOCR('images/previews/ocr/"+f+"');return false;></td><td align='center'><input type='submit' class='button' value='Discard...' onclick=javascript:RemoveOCR('images/previews/ocr/"+f+"');return false;></td></tr></table>"
    445. 

  445.             m.append(ocr_preview)
    446. 

  446.         return m
    447. 

  447. 

  448.     def convert_size(self, size):
    449. 

  449.         import math
    450. 

  450.         if (size == 0):
    451. 

  451.             return '0B'
    452. 

  452.         size_name = ("B", "KB", "MB", "GB", "TB", "PB", "EB", "ZB", "YB")
    453. 

  453.         i = int(math.floor(math.log(size,1024)))
    454. 

  454.         p = math.pow(1024,i)
    455. 

  455.         s = round(size/p,2)
    456. 

  456.         return '%s %s' % (s,size_name[i])
    457. 

  457. 

  458.     def buildGetParams(self, request):
    459. 

  459.         params = {}
    460. 

  460.         try:
    461. 

  461.             path = re.findall("^GET ([^\s]+)", request)
    462. 

  462.         except:
    463. 

  463.             path = re.findall("^GET ([^\s]+)", request.decode('utf-8'))
    464. 

  464.         if path:
    465. 

  465.             path = path[0]
    466. 

  466.             start = path.find("?")
    467. 

  467.             if start != -1:
    468. 

  468.                 for param in path[start+1:].split("&"):
    469. 

  469.                     f = param.split("=")
    470. 

  470.                     if len(f) == 2:
    471. 

  471.                         var = f[0]
    472. 

  472.                         value = f[1]
    473. 

  473.                         value = value.replace("+", " ")
    474. 

  474.                         value = urllib.parse.unquote(value)
    475. 

  475.                         params[var] = value
    476. 

  476.         return params
    477. 

  477. 

  478.     def get(self, request):
    479. 

  479.         cmd_options = ""
    480. 

  480.         runcmd = ""
    481. 

  481.         try:
    482. 

  482.             res = re.findall("^GET ([^\s]+)", request)
    483. 

  483.         except:
    484. 

  484.             res = re.findall("^GET ([^\s]+)", request.decode('utf-8'))
    485. 

  485.         if res is None:
    486. 

  486.             return
    487. 

  487.         pGet = {}
    488. 

  488.         try:
    489. 

  489.             page = res[0]
    490. 

  490.         except:
    491. 

  491.             return
    492. 

  492.         paramStart = page.find("?")
    493. 

  493.         if paramStart != -1:
    494. 

  494.             page = page[:paramStart]
    495. 

  495.             pGet = self.buildGetParams(request)
    496. 

  496.         if page.startswith("/images/") or page.startswith("/js/") or page.startswith("/inputs/"):
    497. 

  497.             if os.path.exists("core/"+page[1:]):
    498. 

  498.                 try:
    499. 

  499.                     f=open("core/"+page[1:],'r',encoding="utf-8")
    500. 

  500.                     data = f.read()
    501. 

  501.                 except:
    502. 

  502.                     try:
    503. 

  503.                         with open("core/"+page[1:],'rb') as img_f:
    504. 

  504.                             data = base64.b64encode(img_f.read()).decode('utf-8')
    505. 

  505.                     except:
    506. 

  506.                         data = ""
    507. 

  507.                 self.pages[page]=data
    508. 

  508.         if page == "/cmd_dict": # view dictionary info
    509. 

  509.             path, dirs, files = next(os.walk("dictionary/"))
    510. 

  510.             total_dirs = len(dirs)
    511. 

  511.             total_files = len(files)
    512. 

  512.             size = 0
    513. 

  513.             for d in dirs:
    514. 

  514.                 path, dirs, files = next(os.walk("dictionary/"+d))
    515. 

  515.                 total_files = total_files + len(files)
    516. 

  516.                 for f in files:
    517. 

  517.                     size += os.path.getsize("dictionary/"+d+"/"+f)
    518. 

  518.             size = self.convert_size(size)
    519. 

  519.             last_update = time.ctime(os.path.getctime("dictionary/"))
    520. 

  520.             self.pages["/cmd_dict"] = "<table align='center' border='1' cellspacing='5' cellpadding='5'><tr><td><u>Creation Date:</u></td><td><u>Size:</u></td><td><u>Total Words:</u></td><td><u>Total Symbols:</u></td></tr><tr><td align='center'>"+str(last_update)+"</td><td align='center'>"+str(size)+"</td><td align='center'>"+str(total_dirs)+"</td><td align='center'>"+str(total_files)+"</td></tr></table>"
    521. 

  521.         if page == "/cmd_remove_ocr": # remove ocr image from previews
    522. 

  522.             if not pGet["symbol"]=="off":
    523. 

  523.                 self.pages["/cmd_remove_ocr"] = "<div style='display:block' id='discarding' name='discarding'><pre>[Info] Discarding image from previews...</pre></div>"
    524. 

  524.                 symbol = pGet["symbol"]
    525. 

  525.                 try:
    526. 

  526.                     os.remove("core/" + symbol)
    527. 

  527.                 except:
    528. 

  528.                     pass
    529. 

  529.         if page == "/cmd_move_ocr": # move ocr image from previews to dictionary
    530. 

  530.             if not pGet["symbol"]=="off":
    531. 

  531.                 self.pages["/cmd_move_ocr"] = "<div style='display:block' id='adding' name='adding'><pre>[Info] Adding image from previews to dictionary...</pre></div>"
    532. 

  532.                 symbol = pGet["symbol"]
    533. 

  533.                 letter = pGet["letter"]
    534. 

  534.                 o = "core/" + symbol
    535. 

  535.                 d = "dictionary/" + letter
    536. 

  536.                 try:
    537. 

  537.                     if not os.path.exists(d):
    538. 

  538.                         os.makedirs(d)
    539. 

  539.                     head, tail = os.path.split(symbol)
    540. 

  540.                     final = d + "/" + tail
    541. 

  541.                     copyfile(o, final) # copy file to letter on dictionary
    542. 

  542.                     os.remove(o) # purge from previews
    543. 

  543.                 except:
    544. 

  544.                     pass
    545. 

  545.         if page == "/cmd_list": # list mods
    546. 

  546.             self.pages["/cmd_list"] = "<pre>Waiting for a list of available modules...</pre>"
    547. 

  547.             runcmd = "(python -i cintruder --mods-list "+ "|tee /tmp/out) &"
    548. 

  548.         if page == "/cmd_list_update":
    549. 

  549.             if not os.path.exists('/tmp/out'):
    550. 

  550.                 open('/tmp/out', 'w').close()
    551. 

  551.             with open('/tmp/out', 'r') as f:
    552. 

  552.                 self.pages["/cmd_list_update"] = "<pre>"+f.read()+"<pre>"
    553. 

  553.         if page == "/cmd_track": # tracking
    554. 

  554.             self.pages["/cmd_track"] = "<pre>Waiting for tracking results...</pre>"
    555. 

  555.             if pGet["tor"]=="on": 
    556. 

  556.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    557. 

  557.             if pGet["verbose"]=="on": 
    558. 

  558.                 cmd_options = cmd_options + "--verbose "
    559. 

  559.             runcmd = "(python -i cintruder --track '"+pGet["tracking_source"]+"' --track-num '"+pGet["tracking_num"]+"' " + cmd_options + "|tee /tmp/out) &"
    560. 

  560.         if page == "/cmd_track_update":
    561. 

  561.             if not os.path.exists('/tmp/out'):
    562. 

  562.                 open('/tmp/out', 'w').close()
    563. 

  563.             with open('/tmp/out', 'r') as f:
    564. 

  564.                 self.pages["/cmd_track_update"] = "<pre>"+f.read()+"<pre>"
    565. 

  565.         if page == "/cmd_tracklist": # list last tracks
    566. 

  566.             self.pages["/cmd_tracklist"] = "<pre>Waiting for a list of last tracks...</pre>"
    567. 

  567.             runcmd = "(python -i cintruder --tracked-list "+ "|tee /tmp/out) &"
    568. 

  568.         if page == "/cmd_tracklist_update":
    569. 

  569.             if not os.path.exists('/tmp/out'):
    570. 

  570.                 open('/tmp/out', 'w').close()
    571. 

  571.             with open('/tmp/out', 'r') as f:
    572. 

  572.                 self.pages["/cmd_tracklist_update"] = "<pre>"+f.read()+"<pre>"
    573. 

  573.         if page == "/cmd_train": # training
    574. 

  574.             self.pages["/cmd_train"] = "<pre>Waiting for training results...</pre>"
    575. 

  575.             if pGet["tor"]=="on": 
    576. 

  576.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    577. 

  577.             if pGet["verbose"]=="on": 
    578. 

  578.                 cmd_options = cmd_options + "--verbose "
    579. 

  579.             if not pGet["colourID"]=="off":
    580. 

  580.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    581. 

  581.             if not pGet["module"]=="off": 
    582. 

  582.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    583. 

  583.             if pGet["source_file"]=="off": # from remote url source
    584. 

  584.                 runcmd = "(python -i cintruder --train '"+pGet["train_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    585. 

  585.             else: # from local source 
    586. 

  586.                 source_file = pGet["source_file"]
    587. 

  587.                 runcmd = "(python -i cintruder --train '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    588. 

  588.         if page == "/cmd_train_update":
    589. 

  589.             if not os.path.exists('/tmp/out'):
    590. 

  590.                 open('/tmp/out', 'w').close()
    591. 

  591.             with open('/tmp/out', 'r') as f:
    592. 

  592.                 self.pages["/cmd_train_update"] = "<pre>"+f.read()+"<pre>"
    593. 

  593.         if page == "/cmd_crack": # cracking
    594. 

  594.             self.pages["/cmd_crack"] = "<pre>Waiting for cracking (bruteforcing) results...</pre>"
    595. 

  595.             if pGet["tor"]=="on":
    596. 

  596.                 cmd_options = cmd_options + "--proxy 'http://localhost:8118' "
    597. 

  597.             if pGet["verbose"]=="on":
    598. 

  598.                 cmd_options = cmd_options + "--verbose "
    599. 

  599.             if not pGet["colourID"]=="off":
    600. 

  600.                 cmd_options = cmd_options + "--set-id='" + pGet["colourID"] + "' "
    601. 

  601.             if not pGet["module"]=="off":
    602. 

  602.                 cmd_options = cmd_options + "--mod='" + pGet["module"] + "' "
    603. 

  603.             if not pGet["xml"]=="off":
    604. 

  604.                 cmd_options = cmd_options + "--xml='" + pGet["xml"] + "' "
    605. 

  605.             if pGet["source_file"]=="off": # from remote url source
    606. 

  606.                 runcmd = "(python -i cintruder --crack '"+pGet["crack_url"]+"' " + cmd_options + "|tee /tmp/out) &"
    607. 

  607.             else: # from local source 
    608. 

  608.                 source_file = pGet["source_file"]
    609. 

  609.                 runcmd = "(python -i cintruder --crack '"+source_file+"' " + cmd_options + "|tee /tmp/out) &"
    610. 

  610.         if page == "/cmd_crack_update":
    611. 

  611.             if not os.path.exists('/tmp/out'):
    612. 

  612.                 open('/tmp/out', 'w').close()
    613. 

  613.             with open('/tmp/out', 'r') as f:
    614. 

  614.                 self.pages["/cmd_crack_update"] = "<pre>"+f.read()+"<pre>"
    615. 

  615.         ctype = "text/html"
    616. 

  616.         if page.find(".js") != -1:
    617. 

  617.             ctype = "text/javascript"
    618. 

  618.         elif page.find(".txt") != -1:
    619. 

  619.             ctype = "text/plain"
    620. 

  620.         elif page.find(".ico") != -1:
    621. 

  621.             ctype = "image/x-icon"
    622. 

  622.         elif page.find(".png") != -1:
    623. 

  623.             ctype = "image/png"
    624. 

  624.         elif page.find(".jpeg") != -1:
    625. 

  625.             ctype = "image/jpeg"
    626. 

  626.         elif page.find(".jpg") != -1:
    627. 

  627.             ctype = "image/jpeg"
    628. 

  628.         elif page.find(".gif") != -1:
    629. 

  629.             ctype = "image/gif"
    630. 

  630.         if page in self.pages:
    631. 

  631.             return dict(run=runcmd, code="200 OK", html=self.pages[page], ctype=ctype)
    632. 

  632.         return dict(run=runcmd, code="404 Error", html="404 Error<br><br>Page not found...", ctype=ctype)
    633. 

  633. 

  634. class Command(object):
    635. 

  635.     def __init__(self, cmd):
    636. 

  636.         self.cmd = cmd
    637. 

  637.         self.process = None
    638. 

  638. 

  639.     def run(self, timeout):
    640. 

  640.         def target():
    641. 

  641.             self.process = subprocess.Popen(self.cmd, shell=True)
    642. 

  642.         thread = threading.Thread(target=target)
    643. 

  643.         thread.start()
    644. 

  644.         thread.join(timeout)
    645. 

  645.         if thread.is_alive():
    646. 

  646.             self.process.terminate()
    647. 

  647.             thread.join()
    648. 

  648. 

  649. if __name__ == "__main__":
    650. 

  650.     webbrowser.open('http://127.0.0.1:9999', new=1)
    651. 

  651.     tcpsock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    652. 

  652.     tcpsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
    653. 

  653.     tcpsock.bind((host, port))
    654. 

  654.     while True:
    655. 

  655.         tcpsock.listen(4)
    656. 

  656.         (clientsock, (ip, c_port)) = tcpsock.accept()
    657. 

  657.         newthread = ClientThread(ip, c_port, clientsock)
    658. 

  658.         newthread.start()
    659. 

  659.