pr0x13 / ibrutr

iCloud Bruteforce PoC - with MultiCurl

Yet Another %100 Working iCloud Bruteforce PoC..

Tested on Ubuntu, Linux Mint, Windows 7 and OSX Yosemite

Disclaimer: Do whatever you want with this code as long as you give me credit (@Pr0x13) Check and make sure its legal in your country to use this tool before doing so. I'm not responsible for any damage done whatsoever to anyones iCloud account or iDevice. I Didn't exploit any accounts while writing this.

This version is (hopefully) more robust-

Features: Word-Mangling thanks to JTR

True Bruteforce (if you have a few years to wait)

Automatic Rate Limiter Sensing Feature (Hopefully won’t DDoS apple servers this time) =]

Ability to Bruteforce Apple Web Objects Server backends

Multi-Curl - huge timing performance boost

CLI

Dependencies: php5-cli php5-curl

The included wordlist is taken from 6 actual database leaks, duplicates removed and sanitized to more suit apple password requirements. Wordlist.lst I made by sorting only passwords with more than 8 characters, removed all numeric passes, removed consecutive characters (3 characters or more), removed all lowercase passwords, passwords without a capital letter and also a number. Mangle.lst is slightly different, it consists of passwords 7 characters or more, and numeric passwords removed. Depending on the charset you use for mangling you can really make use of it. Both are far from perfect and need more cleaning most likely. They are only provided as a starting point, you should really get a different wordlist. Make sure it satisfies Apple’s password requirements here https://support.apple.com/en-us/HT201303

Linux Note: If you don't already have them "sudo apt-get install php5-cli php5-curl"

Mac Note:Brew needs to be installed from here http://brew.sh/ then from terminal "brew install wget" or just compile it from source

Windows Note: Cygwin needs to be installed, and these packages added "php-curl,php-jsonc,wget" (if you get a stat error and john wont compile it will still work but without mangling),

OR manually build directory from install.sh, download external module, install curl for windows and john pre-compiled for win32/64,should be invoked like this:

C:\PHP5\php.exe -f "C:\PHP Scripts\iBrutr" -- -arg1 -arg2 -arg3

Usage:

./install.sh

(if it hangs on downloading, don’t exit just give it some time)

Choose SYSTEM to compile on the left hand side

php iBrutr

OR(while you can until a server is patched)

php MultiBrutr

example:$ php iBrutr -u [email protected]

example:$ php iBrutr -u [email protected] -t 10

example:$ php iBrutr -u [email protected] -r 10 (note about RandomTime) -r has preset default of minimum 3 seconds, argument sets maximum time

example:$ php iBrutr -u [email protected] -m

example:$ php iBrutr -u [email protected] -m -w wordlist.lst

example:$ php iBrutr -u [email protected] -w wordlist.lst

Included in tools is configmake, use that to update config file with your own server info.

This uses John the Ripper and Crunch both available under GNU Public License.

MultiBrutr is an example i wrote of abusing multi curl to brute force two different servers. Use it until one of the servers are fixed..

clean and add are some hacky pipe apps i wrote to clean a collection of wordlists utilizing pipes for the best performance. it contains a couple regex that (hopefully) satisfies Apple ID Password Requirements. Pipe it through JTRs Unique with 3 parallel pipes like this

name your wordlists 0-*.dic

Usage: -c (number of wordlists)

-m (mangle ready)

:$ php add -c 5 | php clean | ./unique wordlist.lst

:$ php add -c 5 -m | php clean | ./unique mangle.lst

                    Until Next Time-    @Pr0x13

ibrutr's Issues

Few small errors

I have compiled everything correctly and I just want to say first off you are a beast for making this program I tip my hat to you. There are only a couple minor errors I encountered. The first is in line 9 of install.sh you need to change the repository to include the new directory of jmathai's EpiCurl.php
Old directory - https://raw.githubusercontent.com/jmathai/php-multi-curl/master/EpiCurl.php
Correct directory - https://raw.githubusercontent.com/jmathai/php-multi-curl/master/src/EpiCurl.php

The second error I encountered I couldn't find exactly which file specifically where I could change the error but I know it's happening upon 'make' of crunch-3.6. The error comes back as stating something like "gcc error: unknown flag undefined cannot output file. gcc error: cannot make incorrect contexts" sorry I didn't copy the EXACT error but I couldn't recreate it. I did however realize that the problem was just that the "undefined" flag needed to be "-undefined" and that fixed the problem to finish compiling crunch.exe.

Now everything else finished compiling correctly and I have iBrutr functioning almost correctly except for one last error I encounter and that's when I go to actually use iBrutr. Something about the context of line 217 in the file "iBrutr" needs changing but I don't know very much about about php coding so I haven't been able to fix it myself. I'll post the output log of the error

========
========
~~========~~PHP Fatal error: Class 'EpiCurl' not found in /home/Administrator/tools/ibrutr/ibrutr on line 217

What do I need to change in line 217: $mc = EpiCurl::getInstance();

Help with system to compile

I'm new to this sort of thing and I'm not sure what to do at "Choose SYSTEM to compile on the left hand side". Can anybody help me? it would be much appreciated

syntax error

Had an issue:
PHP Parse error: syntax error, unexpected '[' in iBrutr on line 284

Lines from 283 to 290:
283: if ($brutetype == "APPLE ID"):
284: $buffer = [];
285: array_push($buffer, $missiles[$x]->data);
286: foreach ($buffer as $responsedata) {
287: if ($missiles[$x]->code == "401"){
288: print "{$r}->{$cc}";
289: }elseif(strpos($responsedata, "protocolVersion") == true){
290: die( "\n\n{$rb} Success! The password is:{$cc} {$g}{$pass}{$cc}\n\n" );

Did I miss something?

What error and how can to fix? Thanks

Hello bro; longtime not see you.
After run in longtime this says that. So how can to fix that and one thing more in many option which one will get result because i tried with mine this says: "EEk! We ran out password" with wordlist.lst only for 3 words.
And Anywhere can make wordlist with requirement of Apple on crunch. Any suggest please/
So anyway thanks for your hard work. I hope first your product i can use for paid.
Hope u have full health; lucky to continue with any exploit.
Goodbye and hope can get your reply soon.

Modules/EpiCurl.php is missing

Hi

i am getting below error , i think modules folder is missing ?

========

~~========~~PHP Warning: include(./modules/EpiCurl.php): failed to open stream: No such file or directory in /iBrutr-master/MultiBrutr on line 218

PHP Warning: include(): Failed opening './modules/EpiCurl.php' for inclusion (include_path='.:/usr/share/pear:/usr/share/php/php') in /iBrutr-master/MultiBrutr on line 218

~~========~~PHP Fatal error: Class 'EpiCurl' not found in /iBrutr-master/MultiBrutr on line 221

Please let me know if i am making some mistake . I am trying this on my id ...!

Thanks
Kiran

Re-Arming loop

is normal that take lang time with message loop =<Re-Arming!>
i have tested it with my icloud and my password add to wordlist in top

hii maybe good script but i have probleme

Please choose a target!!
Warning: Invalid argument supplied for foreach() in /Users/wajih/Desktop/iBrutr/iBrutr on line 78

Ossue

Issue with EpiCurl

PHP Fatal error: Call to undefined method EpiCurl::addURL() in /.../iBrutr-master/iBrutr on line 277

How solve this error?