Example of a quick and dirty way to bruteforce requests

requests-brute.py

import requests
import sys
import threading


def trial(sem: threading.BoundedSemaphore, token):
    while True:
        try:
            resp = requests.get(f"http://whatever?token={token}")
            if resp.status_code == 200:
                print(f"Success found with token {token}")
                sys.exit()
            sem.release()
        except:
            pass # this is fine.


maxconnections = 2000
some_upper_bound = 10000
sem = threading.BoundedSemaphore(value=maxconnections)

i = 0
while i < some_upper_bound:
    if i % 100 == 0:
        print(i)

    sem.acquire(blocking=True)

    t = "whatever" + str(i)

    thread = threading.Thread(target=trial, args=(sem, t,))
    thread.start()

    i += 1