-
-
Save joanbono/5ff72891cf37cf2f81f6f3cc346f7df4 to your computer and use it in GitHub Desktop.
| #!/bin/bash | |
| # Title: Macdown.sh | |
| # Description: Bruteforce DMG files downloaded from mac-torrent-download.net | |
| # Author: Joan Bono (@joan_bono) | |
| # Version: 1.1.0 | |
| # Last Modified: jbono @ 20211129 | |
| RED='\033[0;31m' | |
| GREEN='\033[0;32m' | |
| NOCOLOR='\033[0m' | |
| BOLD='\033[1m' | |
| DMG=$1 | |
| if [ "${DMG}" == "" ]; then | |
| echo "[-] No DMG provided." | |
| exit 0 | |
| else | |
| for x in {{a..z},{0..9}}; do | |
| for y in {{a..z},{0..9}}; do | |
| for z in {{a..z},{0..9}}; do | |
| echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1 | |
| if [ "$?" -eq 0 ]; then | |
| echo -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n" | |
| exit 0 | |
| fi | |
| echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n" | |
| done | |
| done | |
| done | |
| fi |
The one I try to go for has periods in the file name so it states 'no .dmg has been provided'.
Can I run it just by copy/pasting the code in the terminal?
I've tried this, but it doesn't seem to end up finding the password. Like it never finds the correct password, it just says they are all wrong. Would it have something to do with me on an M1 mac or that I use zsh?
Hi @huds0nx Maybe yes, or maybe the password format has changed. Can you confirm which is the current format?
The one I try to go for has periods in the file name so it states 'no .dmg has been provided'.
Can I run it just by copy/pasting the code in the terminal?
Hi @rjdevries1 Can you paste here the steps you are following? Thanks in advance
Hi, i got it working by putting the ${DMG} variable in quotation marks. hdiutil returned an error about the dmg input because the filename likely contains spaces. Here's the fixed version (that also runs slower but it's normal since it actually checks the password : )
#!/bin/bash
# Title: Macdown.sh
# Description: Bruteforce DMG files downloaded from mac-torrent-download.net
# Author: Joan Bono (@joan_bono)
# Version: 1.0.0
# Last Modified: jbono @ 20200102
# Fixed version
RED='\033[0;31m'
GREEN='\033[0;32m'
NOCOLOR='\033[0m'
BOLD='\033[1m'
DMG=$1
if [ "${DMG}" == "" ]; then
echo "[-] No DMG provided."
exit 0
else
for x in {{a..z},{0..9}}; do
for y in {{a..z},{0..9}}; do
for z in {{a..z},{0..9}}; do
echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1
if [ "$?" -eq 0 ]; then
echo -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
exit 0
fi
echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
done
done
done
fi
@marcfusch Thank you, that worked for me.
@marcfusch Thanks, I have updated the Gist.
Thx for the code m8!
I've tried this, but it doesn't seem to end up finding the password. Like it never finds the correct password, it just says they are all wrong. Would it have something to do with me on an M1 mac or that I use zsh?