spam-phishing-attackers.py

import re
import random
from faker import Faker
import threading
import requests


def worker_thread():
    domain = 'marhartap.bs53rssqj9-eqg35wogk3xn.p.runcloud.link'
    user_agent = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.67 Safari/537.36'

    while True:
        fake = Faker()
        username, email_domain = fake.email().split('@')
        year_of_birth = random.randint(1970, 2000)
        victim_date_of_birth = fake.date()
        victim_email = f'{username}@{random.choice(["gmail.com", "outlook.com", "yahoo.com"])}'
        victim_password = random.choice([fake.password(), f'{username}{year_of_birth}', f'{year_of_birth}password', 'password'])

        # Step #1
        # ----------------

        url = f'http://{domain}/bisadiatur.php'
        data = {
            'email': victim_email,
            'password': victim_password,
        }

        headers = {
            'Origin': f'http://{domain}',
            'Referer': f'http://{domain}/',
            'User-Agent': user_agent
        }

        r = requests.post(url, data=data, headers=headers)
        r.raise_for_status()

        # Step #2
        # ----------------

        next_page = re.findall(r'location="(.*)"', r.text, re.MULTILINE)[0]

        headers = {
            'Origin': 'http://marhartap.bs53rssqj9-eqg35wogk3xn.p.runcloud.link',
            'Referer': url,
            'User-Agent': user_agent
        }

        url = f'http://{domain}/{next_page}'
        r = requests.get(url, headers=headers)
        r.raise_for_status()

        # Step #3
        # ----------------

        headers = {
            'Origin': f'http://{domain}',
            'Referer': url,
            'User-Agent': user_agent
        }

        url = f'http://{domain}/bisadiatur2.php'

        r = requests.post(url, data=data, headers=headers)
        r.raise_for_status()

        # Step #4
        # ----------------

        next_page = re.findall(r'location="(.*)"', r.text, re.MULTILINE)[0]

        headers = {
            'Origin': 'http://marhartap.bs53rssqj9-eqg35wogk3xn.p.runcloud.link',
            'Referer': url,
            'User-Agent': user_agent
        }

        url = f'http://{domain}/{next_page}'
        r = requests.get(url, headers=headers)
        r.raise_for_status()

        # Step #5
        # ----------------

        data = {
            'cp': victim_date_of_birth,
        }

        headers = {
            'Origin': f'http://{domain}',
            'Referer': url,
            'User-Agent': user_agent
        }
        url = f'http://{domain}/valid.php'

        r = requests.post(url, data=data, headers=headers)
        r.raise_for_status()

        print(f'sent dummy data to attacks, {victim_email} {victim_password} {victim_date_of_birth}')


def main():

    for _ in range(30):
        t = threading.Thread(target=worker_thread)
        t.start()


if __name__ == '__main__':
    main()