Hack Forums
[Python] Sharing my slow and simple Mega.co.nz cracker - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: [Python] Sharing my slow and simple Mega.co.nz cracker (/showthread.php?tid=4917404)



[Python] Sharing my slow and simple Mega.co.nz cracker - pelayo - Jul 22, 2015

So, this is the Mega.co.nz cracker that I made.

The greater majority of the code is not mine originally. I created the portion at the bottom that clumsily automates the process of checking whether or not an account is valid. I'm likely going to multithread this and make use of the other functions found in the original code. This connects to the API and I couldn't find out a way to make a config for this using Sentry given that it's very tricky and I'm a nubcake when it comes to Sentry.

When you login to Mega.co.nz, your password isn't sent in clear text. It is run through an encryption routine first and then the encrypted version is sent. There is also a unique key that is generated every time you login that must be sent along with the rest of the POST data. If someone can figure out how to do this with Sentry, power to you.

Python Installation Instructions For Windows:
1) Download Python 2.7 here https://www.python.org/ftp/python/2.7.10/python-2.7.10.msiand install it.
2) Download Microsoft Visual C++ Compiler for Python 2.7 here https://www.microsoft.com/en-us/download/details.aspx?id=44266and install it
3) Open a command prompt and navigate to C:\Python27\Scripts
a) Run the commands
Code
pip.exe install pycrypto
and
Code
pip.exe install Crypto
4) Enjoy!

------Instructions------
Place your e-mail:password combo file in the same directory as the Python script. Rename is combo.txt. Run script. Hits found will be placed into hits.txt once the program has finished. Exiting the program forcefully will also flush the found combos out.

Here's the download link https://mega.co.nz/#!6YwVxZIA!_VWM-xNi3A_B02Xbp6nwL-T_pLsifw0wNTItbVe4okg


* - Auxer - Jul 22, 2015

Looks great. Will be using soon.


* - thedarkk - Jul 22, 2015

Thank you to friends,Will be using soon.


* - pelayo - Jul 22, 2015

(Jul 22, 2015 10:56 AM)Jasons Wrote:  Looks great. Will be using soon.

It's pretty darn slow since it isn't using any sort of multi-threading. Just let it run and you'll come back to a file with the working combos.

It's fun going through the accounts. I've found all manner of weird stuff from iPhone dumps with nude pictures and cam models that sell photos/videos of themselves urinating in their underwear to people who store their server login information and website backups on their accounts.

Most of them contain very little, though.


(Jul 22, 2015 11:22 AM)thedarkk Wrote:  Thank you to friends,Will be using soon.

You're very welcome. I hope you don't have any trouble getting it set up.


* - TheNakedEmperor - Jul 25, 2015

sick bro, thanks i'm using it now


* - pelayo - Jul 25, 2015

(Jul 25, 2015 08:01 AM)TheNakedEmperor Wrote:  sick bro, thanks i'm using it now

Happy to hear it!

I'm going to try to modify it further when I have time. I'd like to make it iterate through the files on a cracked account and then download all video/photo/doc/pdf/etc... files.