okay now let's start to build our Python program to Pro Force get the password of the user first we need to identify uh what library we need because it's a web interface right we need a for send the open the URL so we need the URL lab and with the API we see just now right we need to fill in a parameter which is the password so we need to send the request then we go to the URL request documents okay we find the request function okay in the request function there are two important parameters one is the URL one is the data when we are trying to use this web API the front part are fixed so this part will be the UR then the one two three which is the password we are trying this one will replace with different password in the the dictionary and this one is a data now we know which Library we need then we need to identify what function we need so to try them API right we need to open it then we use the open URL open function you can search the F open here then we need to identify what should we handle the exception when the exception happen for example if we try 1 2 3 four five six right it will show the username and password incorrect so if we we get this response we need to try the next one until we get the correct one now we can build our BL for attack function and loop Co try the password one by one then we copy the dictionary and our program together then run it okay let me show you the program okay this is a program so in this program as you can see we import the URL lab and request lab then we set the IP address based on the question at the same time we use a dictionary to try several thousands of password one by one okay you can see here right we have 10 million password in it when you try to S right you can also download several different free password dictionary from the internet okay we now we set this dictionary now we want to read the dictionary into a list then try the one by one so we open the file right with the read mode then read line by line each line is a password then we read it into a password list now let's build the loop okay so we try every password before we use the password right we need to remove the space of the password string then we copy the this is a URL right we copy the URL here then replace the IP address here and then pass in the P password to build the UR after we finish right we call the open open the URL when the server responds we can get some data right here we print the data so if we find that as we show us now if we use a wrong password when we run it we will get this message okay so we check if this message is in the response data if in the resor in the resonse data right we continue if not then we show the current password so this is how we use a python program to BR Force the admin users password in a web okay now let's run our program to see okay you can see start to try different password oops after run a short w we can see that we find the password which is called Coca-Cola okay now let's copy the password into it okay press subit as you can see we successful log right and we can see the so here right we can find the flag