Bruteforce on Board of Canada's landing page (http://cosecha-transmisiones.com/ & http://cosecha-transmisiones.com/terminal.js)

boc.py

#!/usr/bin/python
# -*- coding:utf-8 -*-

import itertools
import requests
import json

characters = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'
password_length = 6
gen = itertools.combinations_with_replacement(characters,password_length)

for password in gen:
  pwd = ''.join(password)
  url = 'http://cosecha-transmisiones.com/password.php?attempt=%s' % pwd
  r = requests.get(url)
  if r.status_code == requests.codes.ok:
    data = json.loads(r.text)
    if data['error'] is not True:
      print data['url'],pwd

I might try a dictionary attack first I think

Here's my attempt:

$handle = fopen('/usr/share/dict/words', 'r');
while (($buffer = fgets($handle, 512)) !== false) {
if (strlen($buffer) != 7) continue;
echo $buffer;

$bocData = file_get_contents('http://cosecha-transmisiones.com/password.php?attempt=' . $buffer);
$data = json_decode($bocData);
if (!empty($data->url)) {
  echo "Secret found: " . $data->url;
  exit;
}
}

Their server gave up handling requests by G or so.. d'oh!