OTP Bypass via RACE condition (Bruteforce)

Questions
1

I have been thinking about this. **I actually want to send all the requests at once depending **. on the amount of "nth_OTP_Len" “NOT ONE AFTER THE OTHER”

Is it possible to send all the request at once like Turbo Intruder in Burp Suite Pro. I want to be able to send all request with varing otp.

NOTE: Here i took otp as a single digit [0 - 9]. I just want to be able to send “n” number of request at thesame instance(in thesame packet). Please anybody who has a solution for this HELP ME OUT. Thanks in Advance.

BLOCK:ConstantList
LABEL:OTP List 10
  value = ["0", "1", "2", "3", "4", "5", "6", "7", "8", "9"]
  => VAR @otp
ENDBLOCK

BLOCK:GetListLength
  list = @otp
  => VAR @nth_OTP_Len
ENDBLOCK
for (int i = 0; i < nth_OTP_Len; i++)
{
BLOCK:Parse
LABEL:Parse otp[i]
  input = @otp[i]
  MODE:LR
  => VAR @parseOtp
ENDBLOCK

BLOCK:HttpRequest
  url = $"https://example.com/<parseOtp>"
  TYPE:STANDARD
  $""
  "application/x-www-form-urlencoded"
ENDBLOCK
}

I think a great way to go about this would be to use something else instead of a for loop. All ideas or solutions to this would be appreciated. Thanks once more in advance…

2

You need to use the parallelizer. If you’re a bit skilled in C# take a look at this

You can of course use it inside LoliCode directly, just add the namespace for RuriLib.Parallelization in the usings section above the editor and then take some of the code and adjust it to your needs. Note that in this case Parallel will not work. Again, you need to be a bit skilled in C# to do this, nothing particularly advanced but you need to fully understand the sample code to adjust it to this specific case.

If you want me to add some LoliCode syntax sugar to use a parallelizer I can do that, just open an issue on github and I will make some syntax to execute some stuff in parallel.