URL-encode usernames

Fixes false "found!" from bad post requests when usernames with spaces are used by URL-encoding usernames too.
the-emmon · May 11, 2021 · aa7439d · aa7439d
1 parent bed7dfc
commit aa7439d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/ettubrute.nim b/ettubrute.nim
@@ -78,7 +78,7 @@ proc main(loginURL:string,tokenName:string,postData:string,uname:string,pword:st
     page2  = split($fetch.headers, "\"set-cookie\": @[\"")[1]
     cookie = split(page2, "; ")[0]
   var
-    inputData    = postData.replace("^USER^", uname).replace("^PASS^", encodeUrl(pword)) & "&" & tokenName & "=" & token
+    inputData    = postData.replace("^USER^", encodeUrl(uname)).replace("^PASS^", encodeUrl(pword)) & "&" & tokenName & "=" & token
     cookieHeader = newHttpHeaders({"Cookie": cookie})
     response     = http.request(loginURL & "?" & inputData, httpMethod = HttpPost, headers = cookieHeader) # Try password
   echo("  --> " & pword)