Bruteforce Password

[adrianh]

This thread is hilarious! (Though, prolly not for the OP)

Your best bet is to find the password stored in the settings object as @Chunjee suggested.

Code: Select all

        username=settings.MAKOR_DB_USERNAME,
        password=settings.MAKOR_DB_PASSWORD,

Makes me think there is a settings file. But I don't see the filepath in your code snippet.

from django.conf import settings perhaps

[adrianh]

I wish I knew where to look for the password inside the python code. This is the only thing that I found, but I don't know what it is referring to:

Code: Select all

from typing import List, Tuple
from uuid import uuid1

from constance import config
from django.conf import settings

from aurora.models import *
from sheet.models import SheetQuote, SheetPart
from ._db_client import MakorDB
from ._web_client import MakorWeb


def makor_db_conn() -> MakorDB:
    return MakorDB(
        host=settings.MAKOR_DB_HOST,
        database=settings.MAKOR_DB,
        username=settings.MAKOR_DB_USERNAME,
        password=settings.MAKOR_DB_PASSWORD,

Would you please tell me how to create a string or array? I really want to try this out.

If you are having trouble tracing the code, you could edit the code to try printing out the password to the console, or write it to a file and then run the code.