Skip to content

Instantly share code, notes, and snippets.

@gardner
Created April 24, 2016 23:55
Show Gist options
  • Save gardner/515563bc6b15ba965f3a4319358e4f5e to your computer and use it in GitHub Desktop.
Save gardner/515563bc6b15ba965f3a4319358e4f5e to your computer and use it in GitHub Desktop.
I got a phishing email today. This fills up the attackers database with junk.
#!/bin/bash
## First download the data files
if [ ! -f 10k_most_common.txt ]; then
curl -O 'https://raw.githubusercontent.com/danielmiessler/SecLists/master/Passwords/10k_most_common.txt' -H 'Pragma: no-cache' -H 'DNT: 1' -H 'Accept-Encoding: gzip, deflate, sdch' -H 'Accept-Language: en-US,en;q=0.8,es;q=0.6' -H 'Upgrade-Insecure-Requests: 1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8' -H 'Cache-Control: no-cache' -H 'Referer: https://github.com/danielmiessler/SecLists/blob/master/Passwords/10k_most_common.txt' -H 'Connection: keep-alive' --compressed
fi
if [ ! -f nouns.txt ]; then
curl -O 'https://gist.githubusercontent.com/gardner/25d36eea91523d5a30d3e5197c6cc2b3/raw/a42ac049336b388674ecd1f1f37dd2f0cbd02ae7/nouns.txt' -H 'Pragma: no-cache' -H 'DNT: 1' -H 'Accept-Encoding: gzip, deflate, sdch' -H 'Accept-Language: en-US,en;q=0.8,es;q=0.6' -H 'Upgrade-Insecure-Requests: 1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8' -H 'Cache-Control: no-cache' -H 'Connection: keep-alive' --compressed
fi
while true; do
nouns=$(gshuf -n 3 nouns.txt)
email=''
for noun in $nouns; do
email="$email$noun"
done
email="${email}@gmail.com"
password=$(gshuf -n1 10k_most_common.txt)
echo $email / $password
curl 'http://itweb31.ru/images/banners/02/validate/up.php' -H 'Pragma: no-cache' -H 'Origin: http://itweb31.ru' -H 'Accept-Encoding: gzip, deflate' -H 'Accept-Language: en-US,en;q=0.8,es;q=0.6' -H 'Upgrade-Insecure-Requests: 1' -H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36' -H 'Content-Type: application/x-www-form-urlencoded' -H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8' -H 'Cache-Control: no-cache' -H 'Referer: http://itweb31.ru/images/banners/02/validate/mail.htm' -H 'Connection: keep-alive' -H 'DNT: 1' --data "email=${email}%40gmail.com&password=${password}" --compressed
done
@gdpelican
Copy link

Nothing says 'eff you, intended user' like while true; do

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment