This script is a login checker for XRCloud, designed to verify a list of username and password combinations using proxy rotation for enhanced anonymity. It utilizes various hashing and encoding methods to prepare requests for the XRCloud API.
- Proxy Support: Automatically rotates through a list of proxies to hide the origin of the requests.
- UUID Generation: Creates unique UUIDs for each login attempt.
- Base64 Encoding: Encodes passwords using Base64 before sending requests.
- MD5 Hashing: Appends an MD5 hash to parameters for request validation.
- Results Logging: Logs successful logins to a text file.
- Python 3.x
requestslibrarytkinterfor file dialog
To set up the environment and install the required packages, follow these steps:
-
Clone the Repository:
git clone <repository_url> cd <repository_directory>
-
Install Dependencies: Make sure you have Python and pip installed, then run:
pip install requests
-
Prepare Your Combo List: Create a text file containing username and password combinations in the format:
username1:password1 username2:password2 -
Run the Script: Execute the script using Python:
python xrcloud_checker.py
-
Select Your Combo File: When prompted, select the text file you created.
-
Monitor Output: The script will output results to the console, indicating whether the login was successful or not. Successful attempts will be logged to
xrcloud-hits.txt.
-
Proxy Rotation: The script uses a list of proxies defined in the
proxiesarray and rotates through them with the help ofitertools.cycle. -
UUID Generation: The
generate_uuid()function generates unique UUIDs based on the current timestamp and random values. -
Encoding and Hashing: Passwords are encoded in Base64, and an MD5 hash is appended to the request parameters to ensure integrity.
-
Login Check: The
check()function handles the login process, checking for successful login responses from the server.
Successful logins, along with relevant user information, are stored in xrcloud-hits.txt for further analysis.
This script is intended for educational purposes only. Ensure you have permission to test the usernames and passwords you are using. Unauthorized access to accounts is illegal and unethical.
[Nouredine_kn]