You'll have to figure out the exact same order of each word in the seed. I'm not aware of any script that brute-forces each possible seed with the 18 words, but there should be one (or maybe someone can write one for you).

The xpub and address will only be useful to verify if the wallet you restored with each seed is the right one or not.