mac-torrent-download DMG brute-forcer

macdown_brute.sh

#!/bin/bash
# Title: Macdown.sh
# Description: Bruteforce DMG files downloaded from mac-torrent-download.net
# Author: Joan Bono (@joan_bono)
# Version: 1.1.0
# Last Modified: jbono @ 20211129

RED='\033[0;31m'
GREEN='\033[0;32m'
NOCOLOR='\033[0m'
BOLD='\033[1m'

DMG=$1

if [ "${DMG}" == "" ]; then
    echo "[-] No DMG provided."
    exit 0
else
    for x in {{a..z},{0..9}}; do
        for y in {{a..z},{0..9}}; do
            for z in {{a..z},{0..9}}; do
                echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1
                if [ "$?" -eq 0 ]; then
                    echo  -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
                    exit 0
                fi
                echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
            done
        done
    done
fi

Question to joanbono: Can i run multiple instances of this at the same time?
notice line 19:
for x in {{a..z},{0..9}}; do

can I just change to something like:
for x in {{a..d},{0..9}}; do and for x in {{e..h},{0..9}}; do

and run them at the same time to save time?
Thanks a lot again. It did a marvelous job.

I guess you refer to run it against multiple DMG files.

You should be able to do so by opening a new terminal for each job

I've tried this, but it doesn't seem to end up finding the password. Like it never finds the correct password, it just says they are all wrong. Would it have something to do with me on an M1 mac or that I use zsh?

The one I try to go for has periods in the file name so it states 'no .dmg has been provided'.
Can I run it just by copy/pasting the code in the terminal?

I've tried this, but it doesn't seem to end up finding the password. Like it never finds the correct password, it just says they are all wrong. Would it have something to do with me on an M1 mac or that I use zsh?

Hi @huds0nx Maybe yes, or maybe the password format has changed. Can you confirm which is the current format?

The one I try to go for has periods in the file name so it states 'no .dmg has been provided'.
Can I run it just by copy/pasting the code in the terminal?

Hi @rjdevries1 Can you paste here the steps you are following? Thanks in advance

Thanks for getting back to me. I believe it is still the ‘mactorrentdownload.net_xxx’ format. I have tried by getting the password from the website, so then I know what it is. But when I run the brute forcer, it just goes over the password and says it’s wrong.

…

On Aug 9, 2021, at 4:56 AM, Joan Bono ***@***.***> wrote: ***@***.*** commented on this gist. I've tried this, but it doesn't seem to end up finding the password. Like it never finds the correct password, it just says they are all wrong. Would it have something to do with me on an M1 mac or that I use zsh? Hi @huds0nx Maybe yes, or maybe the password format has changed. Can you confirm which is the current format? The one I try to go for has periods in the file name so it states 'no .dmg has been provided'. Can I run it just by copy/pasting the code in the terminal? Hi @rjdevries1 Can you paste here the steps you are following? Thanks in advance — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

Hi, i got it working by putting the ${DMG} variable in quotation marks. hdiutil returned an error about the dmg input because the filename likely contains spaces. Here's the fixed version (that also runs slower but it's normal since it actually checks the password : )

#!/bin/bash
# Title: Macdown.sh
# Description: Bruteforce DMG files downloaded from mac-torrent-download.net
# Author: Joan Bono (@joan_bono)
# Version: 1.0.0
# Last Modified: jbono @ 20200102
# Fixed version

RED='\033[0;31m'
GREEN='\033[0;32m'
NOCOLOR='\033[0m'
BOLD='\033[1m'

DMG=$1

if [ "${DMG}" == "" ]; then
    echo "[-] No DMG provided."
    exit 0
else
    for x in {{a..z},{0..9}}; do
        for y in {{a..z},{0..9}}; do
            for z in {{a..z},{0..9}}; do
                echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1
                if [ "$?" -eq 0 ]; then
                    echo  -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
                    exit 0
                fi
                echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
            done
        done
    done
fi

@marcfusch Thank you, that worked for me.

@marcfusch Thanks, I have updated the Gist.

Thx for the code m8!