complexpotato / Faitagram

(Doesn't work anymore)
MIT License
176 stars 194 forks source link

Always same password #13

Open hshehab opened 6 years ago

hshehab commented 6 years ago

Hello,

I tried everthing for that to work, fixed tor.service issue then all my accounts show the same password: 123456 which is wrong for sure. can you help please

complexpotato commented 6 years ago

That means you tried it before, I am currently working on the proxy part, the social media security checks that the request is way too heavily requested from one IP, so it blocks it. The script works by deciding whether the “password wrong” is in the web, but if it detects bruting, it automatically changes the page. So the script thinks it is the right password. I am currently trying to fix this problem, I won’t close this issue.

hshehab commented 6 years ago

Thanks for your response juniorn, yeah guess it's exactly what you're saying coz facebook sent me an email in regards of security to log in again in case i wasn't trying to log. They detected something.

anyways thanks again for your response and looking forward for your solution.

smokeabird commented 6 years ago

Hello Juniorn1003, You're right ! The same problem happens with the two others services. But, the error happens after 20 passwords, after that twitter and instagram securities block the bruteforcing, telling us to retry connection one hour later.

complexpotato commented 6 years ago

@smokeabird You are right, but the securities will not block if we change the IP and then request, because they are made to just detect it by if it is coming from the same IP.

NightyBoi commented 6 years ago

Hmmm now I get the Errno 111 Connection refused after 2 passwords, like before

complexpotato commented 6 years ago

@PlaguedByWeirdness I know, it is because the socks proxy doesn't work in selenium. And that is what I have to figure out.

NightyBoi commented 6 years ago

Ohh so that's the error, well good luck in figuring it out mate!

NightyBoi commented 6 years ago

How is it going? If you want I could get into that too, but I would probably need some time to actually see what is done and how in order to be able to help.

complexpotato commented 6 years ago

@PlaguedByWeirdness Ok, so I added a socks5 proxy, you know that, but the problem is it is not compatible with selenium. A way I found is close the selenium session, and doing it again, after the IP is changed by socks. but that will take way too long time to bruteforce, so I am googling what proxy is compatible with selenium, with out any errors.

NightyBoi commented 6 years ago

@Juniorn1003 Alright, keep me updated on your findings if you can

MelissaMV commented 6 years ago

@Juniorn1003 If u get this to work ur really good and it will be the only tool on the net to bruteforce a facebook profile without getting locked out. Good Luck!

jlgager24 commented 6 years ago

I'm very interested in seeing this work too. I'm a java developer so if I can be of any help please let me know. Hope you figure it out!

complexpotato commented 6 years ago

vanguard71 suggested to delete the username checking part, is that OK with you guys?

NightyBoi commented 6 years ago

@Juniorn1003 Sure, why not

Bitwise-01 commented 6 years ago

replace your assertions with if statements, and check for data that will only occur in the HTML when an account is authenticated. You bounce your IP to keep yourself hidden, not to go around locked accounts. Sites like these know that a hacker will bounce their IP and continue to brute force if they only lock the hacker's IP; so, they lock the account and the IP. The only way to get around this is to reduce your attempt rate.

complexpotato commented 6 years ago

@Ethical-H4CK3R I NEVER expected you here! Wow, I actually made this because your script didn't work

Bitwise-01 commented 6 years ago

I guess you don't want my help.

AlzMa commented 6 years ago

I think he wants, and admires your work.. @Ethical-H4CK3R

maumau35 commented 6 years ago

https://github.com/SeleniumHQ/selenium/issues/2963 Maybe this? Very new to programming, so sorry if this is not where you are looking for.

complexpotato commented 6 years ago

@maumau35 Nah, that is Java and this is python, the problem in #2963 is the starting proxy problem, and this is a problem about the proxy during selenium is running.

maumau35 commented 6 years ago

Thanks, for clarifying. Maybe try stackoverflow or in selenium issues?

complexpotato commented 6 years ago

@maumau35 Of coures I asked. But apparently no one replies, it has about a 100 views.

complexpotato commented 6 years ago

@antony-jr Nice advertisement, just like me

glerinsonum commented 6 years ago

@Juniorn1003 Hello. Brother of Good. With what type version program of python should need to demonstrate.

ROOTH4CK3R commented 6 years ago

Same here. I tried the script for all facebook, twitter and instagram but the same password "123456" keep showing up and it's not correct. What should I do?

fiiik commented 6 years ago

Really excited to know whether its working or not. Anyway keep pn researching bruv

tosettil-polimi commented 6 years ago

Hi, today the same problem remained, does anyone know if there is a solution?

robbins commented 6 years ago

Same problem after 1 password attempt, testing Instagram.

AbdelXY commented 5 years ago

not working