demon1a / gmailbruterv2

Simple tool written in python3 to perform limited brute-force attacks on gmail accounts.

GmailBruterV2 💫

• Simple Tool Written In Python3 To Perform Limited Brute-Force Attacks On Gmail Accounts.

Table of Contents 😃

• Installation
• CLI Commands
• How To Create a Config?
• When GmailBruter Creates a Successful Brute-Force Attack?
• What Should I Do If The SMTP Conncetion Disconnectes?
• How To Execute a Shell Command?
• How To Make a Successful Brute-Forcing Attack?
• What's New?

Installation 👈

git clone https://github.com/DEMON1A/GmailBruterV2
cd GmailBruterV2

CLI Commands 👈

help -- To Show Help Message 
set target -- To Set The Victim Email Address
set time -- To Set Time Between Every 10 Faild Passwords
set list -- To Set PassList Name
show target -- To Show You Current Target
show time -- To Show You Current Time
show list -- The Show You Current List
start -- To Start Brute Force Attack
load -- Load Local Config For Settings

exit -- Close The Shell

s-{CMD} -- Executing Shell Command

How To Create a Config? 😕

• It's Pretty Easy Here. You Just Need To Create a Local File Looks Like This:

email:{TARGET}
list:{LIST-PATH}
time:{TIME}

• Here's a Simple Example Of The Config

email:[email protected]
list:PassList.txt
time:10

When GmailBruter Creates a Successful Brute-Force Attack? 😮

• @Alvin-22 did point out that. GmailBruter will only work only on accounts with "less secure apps" option enabled on your account. at the current time to protect your gmail account from brute-force attacks all you need to disable this option if it's enabled on your account. for full details about disabling "less secure apps" option. please follow this article: https://support.google.com/accounts/answer/6010255?hl=en

What Should I Do If The SMTP Conncetion Disconnectes? 😟

• You Should Wait Sometime Until You Get Unblock From Gmail SMTP. Or Use Any VPN But I Would Suggest Using VPNs While Brute-Forcing.
• Also, Don't Try a Lot Of Attemps On a Specefic Gmail Account. Even If You Got a Valid Password For It, Google Will Send a Waring Email Into Him/Her

How To Execute a Shell Command? 🧐

• You Just Need To Add Your Command After s- For Example You Want To List The Files In The Current Directory. So You Gonna Add ls After s-, It Will Look Like This s-ls. Then The Program Will Return The Files In The Current Directory.

How To Make a Successful Brute-Forcing Attack? 🙁

• I Did Increase The Attemps Of The Passowrd Brute-Force Here By Closing The Connection Everytime You Get 10 Bad Passwords. Then Create a New Conncetion. But That Isn't Gonna Help With Gmail That Much. You Have To Use a VPN Or Wait Sometime Between Every SMTP Server Disconnection. If You Kept Brute-Forcing Without STOP. Even If You Got The Valid Password Google Will Stop You And Send a Crtitcal Alert To The Account Owner. Telling Him To Change His Password.

Contact:

• If you need any help feel free to contact me, otherwise don't contact me about side-jobs or any sort of things like "I wanna hack my uncle's phone" your message will just get ignored

What's New? 💝

• Fixing Some Issues With The Authentication
• Increasing The SMTP Login Attemps By ReCreating The Connection and Sleeping
• Shell Command Execution Using The Tool
• Loading Local Config To Aviod Adding The Same Setting Everytime.
• Solving Extra Spaces Issue By Replacing Them And Edit The Commands.
• Cleaner Code!

gmailbruterv2's Issues

Small code optimization

Adding a break to not loop all passwords if SMTP server disconnected so it prints only once

how do i start in=t

@DESKTOP-B56O723:~/GmailBruterV2$

how do i start it?

GBv2 only works with google accounts with enabled "less secure apps" option.

Doesn't work because it requires Gmail "less secure apps" enabled, should definitely include this note for the people thinking it will work or atleast a way to make it "secure"!

HELP

set target
File "", line 1
set target
^
?? am i doing something wrong?

how to use on ubuntu 22.04?

what commands to use? if it isnt supposed to be used on linux then should i do it on windows?

unable to understand. Issue with commands

Unable to run few command or may be i am running it wrong. Can you please make the documentation more clear and also help me with this issue.

┌──(root💀kali)-[~/GmailBruterV2]
└─# python3 GmailBruterV2.py

                    [>] SimpleGMailBruter [<]

root@GmailBruter: help

Help Guide For GmailBruterV2.
Commands For Shell:
help -- To Show This Messages
set target -- To Set The Victim Email Address
set time -- To Set Time Between Every 10 Faild Passwords
set list -- To Set PassList Name
show target -- To Show You Current Target
show time -- To Show You Current Time
show list -- To Show You Current List
load -- Load Local Config For Settings
start -- To Start Brute Force Attack

    exit   --   Close The Shell

root@GmailBruter: s-set target email:[email protected]
Command:set target email:[email protected]
Results:

root@GmailBruter: s-set list list=saurav.txt
Command:set list list=saurav.txt
Results:

root@GmailBruter: s-set time time=10
Command:set time time=10
Results:

root@GmailBruter: s-show target
/bin/sh: 1: show: not found
Command:show target
Results:

root@GmailBruter: s-start
/bin/sh: 1: start: not found
Command:start
Results:

root@GmailBruter:

New to Coding

I don`t know where to put the code and how to do the config file and if I have to add anything or remove or change

[process exited with code 1 (0x00000001)]

Hi,

As you can tell, I am not Python programmer, any assistance with the below would be greatly appreciated.

"Traceback (most recent call last):
File "C:\Temp\GmailBruterV2-master\GmailBruterV2.py", line 175, in
StartShell()
File "C:\Temp\GmailBruterV2-master\GmailBruterV2.py", line 68, in StartShell
with open(os.path.join("data" , "Commands") ,'r') as CommandsFile:
FileNotFoundError: [Errno 2] No such file or directory: 'data\Commands'

[process exited with code 1 (0x00000001)]"

Thanks

Britts

Request for features

1. I think it is better to use logs for the activity, so we can analyze if the program works or not.
2. It is also good if we put random proxy to randomize request every 10 attempts
3. We can use other google link to bypass "Allow Less Secure Apps"

when i put my true password for my email that i am attacking, it doesnt recognize it, ive just added my password in default password list

Missing/Wrong Command Duo To Invalid Commands On The File.

• While Updating The Tool I Forgot To Add The New Commands Including The Old Ones Without Spaces. That Disallow The User From Using The Shell. If You're Using This Version Of The Tool Please Update.

The SMTP Server Disconnected.

`Error: Connection unexpectedly closed

The SMTP Server Disconnected. Please Run The Tool Again After Changing Your IP Address Or After Waiting Sometime`

How can it be if every time the script go to sleep (15 seconds) I switch ip with vpn and I still get this
error after 60-70 passwords.... any help or an idea?

F

Newlines '\n' Isn't Getting Stripped From The Passwords Returning Bad Results With Valid Stuff.

• I'm currently fixing this tool instead of deleting it. I wanted to share to hall process with you guys using the issues.

• On the StartBruteAccount() Function at line 24 the program is taking the passwords from a newline-separated list without removing the newline from it. that uses a bad password won't be valid with the authentication and even if the password is valid the program won't show that it's valid since it's using a bad password. the fix will be something like this

for Password In PasswordsList:
    Password = Password.rstrip("\n")
    
    [SMTP Auth Here...]

program closes when i starts brute

what do i do

It's Hard To Keep Setting The Setting Everytime.

• I just noticed that it's really boring to keep adding the settings again and again. this will be fixed by adding a load command to load a local file that contains a config. so if you want to brute-force auth credits for a Gmail account multi times you don't need to copy add the settings again.