mac-torrent-download DMG brute-forcer

macdown_brute.sh

#!/bin/bash
# Title: Macdown.sh
# Description: Bruteforce DMG files downloaded from mac-torrent-download.net
# Author: Joan Bono (@joan_bono)
# Version: 1.1.0
# Last Modified: jbono @ 20211129

RED='\033[0;31m'
GREEN='\033[0;32m'
NOCOLOR='\033[0m'
BOLD='\033[1m'

DMG=$1

if [ "${DMG}" == "" ]; then
    echo "[-] No DMG provided."
    exit 0
else
    for x in {{a..z},{0..9}}; do
        for y in {{a..z},{0..9}}; do
            for z in {{a..z},{0..9}}; do
                echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1
                if [ "$?" -eq 0 ]; then
                    echo  -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
                    exit 0
                fi
                echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
            done
        done
    done
fi

Hi, i got it working by putting the ${DMG} variable in quotation marks. hdiutil returned an error about the dmg input because the filename likely contains spaces. Here's the fixed version (that also runs slower but it's normal since it actually checks the password : )

#!/bin/bash
# Title: Macdown.sh
# Description: Bruteforce DMG files downloaded from mac-torrent-download.net
# Author: Joan Bono (@joan_bono)
# Version: 1.0.0
# Last Modified: jbono @ 20200102
# Fixed version

RED='\033[0;31m'
GREEN='\033[0;32m'
NOCOLOR='\033[0m'
BOLD='\033[1m'

DMG=$1

if [ "${DMG}" == "" ]; then
    echo "[-] No DMG provided."
    exit 0
else
    for x in {{a..z},{0..9}}; do
        for y in {{a..z},{0..9}}; do
            for z in {{a..z},{0..9}}; do
                echo -n "mac-torrent-download.net_${x}${y}${z}" | hdiutil attach -stdinpass "${DMG}" > /dev/null 2>&1
                if [ "$?" -eq 0 ]; then
                    echo  -ne "${GREEN}${BOLD}[+] Found password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
                    exit 0
                fi
                echo -ne "${RED}${BOLD}[-] Tested password:${NOCOLOR} mac-torrent-download.net_${x}${y}${z}\n"
            done
        done
    done
fi

@marcfusch Thank you, that worked for me.

@marcfusch Thanks, I have updated the Gist.

Thx for the code m8!