import requests import string import random import urllib import StringIO import gzip import json import time import hashlib import threading threads = 5 sleep = 5 def random_machine_id(): return ''.join(random.choice(string.ascii_uppercase + string.digits + string.ascii_lowercase) for _ in range(24)) class register(object): def __init__(self): names = ["Ahmed", "Mohamed", "Mahmoud", "Salah", "Sayed", "Ezzat", "Khaled", "John", "Abdo", "Adel", "Nabil", "Fathy", "Omar", "Reda", "Alaa"] r = requests.get("https://m...content-available-to-author-only...o.space/get/inbox/229397671eaf6fa84c44ea27c68bd22a561dbc20/new").json() self.email = "%s@%s"%(r[0], r[1]) self.password = random.randint(100000000000,999999999999) self.fName = random.choice(names) self.lName = random.choice(names) self.birthday = "19%s-%s-%s"%(random.randint(50,99), random.randint(1,12), random.randint(1,28)) self.access_token = "" def Register(self): data = sorted([ ('email',self.email), ('firstname',self.fName), ('lastname',self.lName), ('gender','M'), ('password',self.password), ('birthday',self.birthday), ('return_multiple_errors','true'), ('attempt_login','true'), ('reg_instance','84e02e60-3883-4282-8b2f-f6e22b5734b1'), ('device_id','84e02e60-3883-4282-8b2f-f6e22b5734b1'), ('family_device_id','cfa53049-7230-41ee-a275-ad24061010e7'), ('format','json'), ('skip_session_info','true'), ('advertising_id','09a81cbe-9b67-4411-953c-564dd55115dc'), ('meta_inf_fbmeta','NO_FILE'), ('locale','en_US'), ('client_country_code','US'), ('method','user.register'), ('fb_api_req_friendly_name','registerAccount'), ('fb_api_caller_class','com.facebook.registration.fragment.RegistrationCreateAccountFragment'), ('api_key','882a8490361da98702bf97a021ddc14d') ]) sig = "" for x in data: sig += str(x[0]) + "=" + str(x[1]) sig += "62f8ce9f74b12f84c123cc23437a4a32" m = hashlib.md5() m.update(sig) data.append(("sig", m.hexdigest())) headers = { 'X-Fb-Connection-Type' : 'mobile.LTE', 'X-Fb-Net-Hni' : '310260', 'X-Fb-Sim-Hni' : '310260', 'X-Fb-Net-Sid' : '', 'X-Fb-Http-Engine' : 'Apache', 'Content-Type' : 'application/x-www-form-urlencoded', 'Content-Encoding' : 'gzip', 'User-Agent' : '[FBAN/FB4A;FBAV/37.0.0.0.109;FBBV/11557663;FBDM/{density=1.5,width=480,height=854};FBLC/en_US;FBCR/Android;FBMF/unknown;FBBD/generic;FBPN/com.facebook.katana;FBDV/google_sdk;FBSV/4.4.2;FBOP/1;FBCA/armeabi-v7a:armeabi;]' } out = StringIO.StringIO() with gzip.GzipFile(fileobj=out, mode="w") as f: f.write(urllib.urlencode(data)) r = requests.post("https://b...content-available-to-author-only...k.com/method/user.register", headers=headers, data=out.getvalue()) #print r.text def Login(self): data = { 'batch': '[{"method":"POST","body":"format=json&device_id=0cd272a7-17dc-4766-958e-5b48799250bf&email='+self.email+'&password='+str(self.password)+'&credentials_type=password&generate_session_cookies=1&error_detail_type=button_with_disabled&machine_id='+random_machine_id()+'&locale=en_US&client_country_code=US&fb_api_req_friendly_name=authenticate","name":"authenticate","omit_response_on_success":false,"relative_url":"method/auth.login"},{"method":"POST","body":"query_id=10153437257771729&method=get&strip_nulls=true&query_params=%7B%220%22%3A75%2C%221%22%3A120%2C%222%22%3A480%7D&locale=en_US&client_country_code=US&fb_api_req_friendly_name=GetLoggedInUserQuery","name":"getLoggedInUser","depends_on":"authenticate","omit_response_on_success":false,"relative_url":"graphql?access_token={result=authenticate:$.access_token}"}]', 'fb_api_caller_class': 'com.facebook.katana.server.handler.Fb4aAuthHandler', 'fb_api_req_friendly_name': 'authLogin' } headers = { 'Authorization' : 'OAuth 350685531728|62f8ce9f74b12f84c123cc23437a4a32', 'X-Fb-Connection-Type' : 'mobile.LTE', 'X-Fb-Net-Hni' : '310260', 'X-Fb-Sim-Hni' : '310260', 'X-Fb-Net-Sid' : '', 'X-Fb-Http-Engine' : 'Apache', 'Content-Type' : 'application/x-www-form-urlencoded', 'Content-Encoding' : 'gzip', 'User-Agent' : '[FBAN/FB4A;FBAV/37.0.0.0.109;FBBV/11557663;FBDM/{density=1.5,width=480,height=854};FBLC/en_US;FBCR/Android;FBMF/unknown;FBBD/generic;FBPN/com.facebook.katana;FBDV/google_sdk;FBSV/4.4.2;FBOP/1;FBCA/armeabi-v7a:armeabi;]' } out = StringIO.StringIO() with gzip.GzipFile(fileobj=out, mode="w") as f: f.write(urllib.urlencode(data)) try: r = requests.post("https://b...content-available-to-author-only...k.com/?include_headers=false&locale=en_US&client_country_code=US", headers=headers, data=out.getvalue()) except Exception as e: pass if 'access_token' in json.loads(r.json()[0]['body']): self.access_token = json.loads(r.json()[0]['body'])['access_token'] print "[!] Access Token : " + self.access_token def Confirm(self): inbox = requests.get("https://m...content-available-to-author-only...o.space/get/mails/"+self.email.split("@")[0]) status = True while status: if len(inbox.json()[1]) >= 1: status = False #print "yes, i have it now!" ff = 1 url = requests.get("https://m...content-available-to-author-only...o.space/get/content/"+inbox.json()[1].keys()[0]+"/text").text while(ff): try: #print "CODE: " + url.split("c=")[1].split("&")[0] ff = 0 except Exception, e: url = requests.get("https://m...content-available-to-author-only...o.space/get/content/"+inbox.json()[1].keys()[1]+"/text").text ff = 1 data = { 'normalized_contactpoint': self.email, 'contactpoint_type': 'EMAIL', 'code': url.split("c=")[1].split("&")[0], 'source': 'ANDROID_DIALOG_API', 'surface': 'hard_cliff', 'format': 'json', 'locale': 'en_US', 'client_country_code': 'US', 'method': 'user.confirmcontactpoint', 'fb_api_req_friendly_name': 'confirmContactpoint', 'fb_api_caller_class': 'com.facebook.confirmation.fragment.ConfCodeInputFragment', } headers = { 'Authorization' : 'OAuth ' + self.access_token, 'X-Fb-Connection-Type' : 'mobile.LTE', 'X-Fb-Net-Hni' : '310260', 'X-Fb-Sim-Hni' : '310260', 'X-Fb-Net-Sid' : '', 'X-Fb-Http-Engine' : 'Apache', 'Content-Type' : 'application/x-www-form-urlencoded', 'Content-Encoding' : 'gzip', 'User-Agent' : '[FBAN/FB4A;FBAV/37.0.0.0.109;FBBV/11557663;FBDM/{density=1.5,width=480,height=854};FBLC/en_US;FBCR/Android;FBMF/unknown;FBBD/generic;FBPN/com.facebook.katana;FBDV/google_sdk;FBSV/4.4.2;FBOP/1;FBCA/armeabi-v7a:armeabi;]' } out = StringIO.StringIO() with gzip.GzipFile(fileobj=out, mode="w") as f: f.write(urllib.urlencode(data)) r = requests.post("https://a...content-available-to-author-only...k.com/method/user.confirmcontactpoint", headers=headers, data=out.getvalue()) #print r.text if r.text == "true": print "[info] Email : {1} -> Passoword : {0}".format(self.email , self.password) break inbox = requests.get("https://m...content-available-to-author-only...o.space/get/mails/"+self.email.split("@")[0]) #print "Wait!" def worker(): f = register() f.Register() f.Login() f.Confirm() return while(1): threads_ = [] print "[!] Starting {} Thread/s".format(threads) for i in range(threads): t = threading.Thread(target=worker) threads_.append(t) t.start() print "[!] Sleeping {} Second/s".format(sleep) time.sleep(sleep)