Pentester Academy Web Application Challenge 3 Solution

This is a very simple kind of challenge with basic authorization.It uses POST method to send the request with a Authorization Header.

Here is my python Code for above challenge

Pentester Academy Web Application Challenge 2 Solution

In this Challenge Intially there is a login form in which we have enter username "@pentesteracademy.com"+ and password and in the next step there is basic authorization in which we have to enter same username and password.
But when i tried to use burp intruder for three different payloads,username,password,and basic authorization of username and password it failed.
So,i used burp repeater and tried using OPTIONS method instead of GET method .It responded that the method is not allowed ,only Method GET & HEAD is allowed.

So it mean's if i request with HEAD method with all combination of username and password i will get authorized page.
Here is my python script for paricular above challenge

Pentester Academy Web Application Challenge 1 Solution

As I Have Got some holiday's, i thought to do something interesting .So i thought why not solve Pentester Academy Web Application Challenges...and here i'am starting from the first challenge.
I captured the login request using burp with random password and username which is shown above.
As it is a form based login so only we have to iterate over password field and username which has only two possibilties jack & admin .

Here is my Python Code for the above problem:

It Is fairly a simple code.But who do not have knowledge of Python urllib2 library,i have another solution for You ...
You can intercept the request using the burp and then send the Request to the Burp Intruder and apply payload only for password....

then create and load a password list in the payload option and then start the attack.

And you will find Email-admin@pentesteracadmey.com, Password-zzzxy