How to brute force HTTP POST with token appended to password

[starleaf1]

I've been messing around with my (undeployed) website. I downloaded one of those pre-configured systems. From what I figured out, it shows a form to user into which users input their ID and password. When user submits, the two fields' values are passed via JavaScript to an other hidden form. The ID is passed as is, but the password is combined with several characters--which are generated randomly upon the request of the login page--in front of and at the back, the combination is then MD5'd.
The ID and the 'tokenized' password then posted to the server.

Is there any way I can brute force this thing? Preferably not by hand.

[centip3de]

I've been messing around with my (undeployed) website. I downloaded one of those pre-configured systems. From what I figured out, it shows a form to user into which users input their ID and password. When user submits, the two fields' values are passed via JavaScript to an other hidden form. The ID is passed as is, but the password is combined with several characters--which are generated randomly upon the request of the login page--in front of and at the back, the combination is then MD5'd.
The ID and the 'tokenized' password then posted to the server.

Is there any way I can brute force this thing? Preferably not by hand.

Well, yes. You could write a brute forcer to try every password/user combo under the sun. I don't understand the question here..