SecurityTube WAP_Challenge 7

brute7.py

import itertools , md5


listp = []

a = list(itertools.product(['x','y','z','1','2','3'], repeat =  6))

for e in a:
    a = ''.join(e)
    listp.append(a)


nonce = "X95LDujmBAA=9c8ec8a0aeee0ddf7f24a5a75c57d0f90245d0f5"
uri = '/'
username = "webadmin"
method = "GET"
nc = "00000001"
qop = "auth"
cnonce="89b024ea3adb54ec"
response = "0fd7c603fdf61e89bfc9c95fb73e343a"
realm="Pentester-Academy"

for password in listp:

      h1 = (username+":"+realm+":"+password)
      ha1 = (md5.md5(h1).hexdigest())

      h2 = (method+":"+uri)
      ha2 = (md5.md5(h2).hexdigest())

      resp = (ha1+":"+nonce+":"+nc+":"+cnonce+":"+qop+":"+ha2)
      response2 = (md5.md5(resp).hexdigest())

      if response2 == response:
           print "Big Thanks To Pentester Academy !"
           print "Username = webadmin "
           print "Password = " + password