lightos / credmap Goto Github PK

Could you make an option so the user can input one username or email and just a ton of passwords? <3

This doesn't seem to be working at all, I tried to change the delimiter to "|" but i get the same parsing errors
Python 2.7.14

esdfg:78unnknm:[email protected]
jkjkmm:HUJJNH%%:[email protected]
imltftdgh:Kk250561#:[email protected]
tdfchg:1*HUJJJ:[email protected]
hjghkl:Wtshnn8082:[email protected]
oklmljk:tvhvhjv:[email protected]
drcygcgh:78huhkkh:[email protected]

python credmap.py --verbose -o imgur.com --proxy "socks5://172.0.0.1:9050" -l creds.txt -f "u:p:e"

i] Loaded 1 site to test.
i] Loaded 7 credentials from "creds.txt".

i] Starting tests at: "05:12:36"

 does not appear to be correct. Skipping...gygjg.com

 does not appear to be correct. Skipping...oud.com

 does not appear to be correct. Skipping....com

 does not appear to be correct. Skipping...ddd-gt.fc.com

 does not appear to be correct. Skipping...lkm.org

 does not appear to be correct. Skipping...fj.com

*] Testing [drcygcgh:78huhkkh] on "Imgur"...
i] The provided credentials are incorrect or the account doesn't exist.

i] Succesfully logged in with 0/1 credentials on the list..
i] An overall success rate of %0.

i] Finished tests at: "05:12:37"

python credmap.py --verbose -o stackoverflow.com --proxy "socks5://172.0.0.1:9050" -l creds.txt -f "u:p:e"

 [i] Loaded 1 site to test.
 [i] Loaded 7 credentials from "creds.txt".
 
 [i] Starting tests at: "05:14:09"
 
 " does not appear to be correct. Skipping...gygjg.com
 
 " does not appear to be correct. Skipping...oud.com
 
 " does not appear to be correct. Skipping....com
 
 " does not appear to be correct. Skipping...ddd-gt.fc.com
 
 " does not appear to be correct. Skipping...lkm.org
 
 " does not appear to be correct. Skipping...fj.com
 
 [*] Testing [drcygcgh:78huhkkh] on "Stack Overflow"...
 [!] Warning: CSRF token not found. Skipping site...
 
 [i] Succesfully logged in with 0/1 credentials on the list..
 [i] An overall success rate of %0.
 
 [i] Finished tests at: "05:14:10"

Add a new parameter that will test both the email and the username on a site when both are available and the site supports login in via both.

I propose that rather than supplyign the password with -p. that if -p is provided then a read command is issued instead to hide the password being typed. else this leaves the creds in plain text in the history etc..

I know you cna specify a file instead but the option for both is better

Currently the default format when parsing credentials from a file is: email:password or username:password.

The idea is to implement an option, like --format, that can be used to specify the format to use when reading credentials from a file.

The allowed values for this parameter would be in the format: u|e|p separator u|e|p [...]. For example:
email:password
username;email;password
email,username,password

Could you make an option so the user can input one username or email and just a ton of passwords? <3

Add an option to set how many threads to use in order to test multiple sites/credentials simultaneously.

Implement v8 to have the ability to parse JavaScript, specifically for CSRF tokens that are generated using JS.

It would be great if you added Netflix to the list of available websites // Estaría genial si agregaras Netflix a la lista de sitios web (website) disponibles

That would be super nice to have a little manual on creating your own site modules
Could you please make it?

Hello, I'm trying to add some modules but it's hard to debug without intercepting https, I tried to specify a proxy but it doesn't seem to work:

python credmap.py --email XXXXXX --password XXXXXXX --only XXXXX --proxy https://127.0.0.1:8080

I have Burp listening on local host, Burp is fine because it is proxying my web browser without issue.

Hey Team

You did a great job . This script is really awesome.

Please add gmail also and other account also.

I wanna write a script that gets the xml properties of a url and then saves it in the websites folder do you have suggestions or methods to do that?

While testing, I noticed that all credentials provided would provide a "positive" result for Groupon. Upon attempting to log in with the specified credentials, however, I was informed that the credentials were invalid.

Will attempt debugging of this at a later date.

Adding new websites to be tested using credmap can be done by creating a new XML file in the websites/ folder.please tell me which tool to use

Locks up on Groupon the first time on first run; ctrl-c and re-run and it's then ok.

Python 2.7.12
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 16.04.3 LTS
Release: 16.04
Codename: xenial

I assume that its not possible to work with gmail or and such or it would already be added. I'm just curious what the reason is that prevents it? Is it just missing the right config file?

Hi there!

First of all, i'l have to admit that im am very new to all of this... :|
Just a hobby-ist trying out some things. I am very intreseted in this project, but i simply cant get it to work...

Ive installed python, and the Github and git shell, aswell as the downloaded program om my desk (wich is windows btw) now i found that i have to execute the /credmap.py --username janedoe --email [email protected] command. but where exactly do i execute that? because when i try to use it in GitShell of cmd (probably noobish) it opens and directly closes...

is there a more explaining guido as to how i use Python scripts and your scripts? would love to try some things out. 👍