Pwn script for corona-virus challenge CTF

import requests

def xor(s, key):
    res = ""
    for i in range(len(s)):
        res+= chr(ord(s[i]) ^ ord(key[i%len(key)]))
    return res

def to_hex(s):
    res = s.encode("utf-8").hex()
    return res

def xor_and_hex(s, key):
    res = to_hex(xor(s, key))
    return res

def main():
    """
    1. generate Token start
    2. generate mp4 part
    3. Generate username
    4. Generate Computer name

    Send the requests with a token as a get requests, check result and save it if it's a picture

    """


    UNAME_REAL = "The!Spy!Konstantin-K"
    COMPNAME_REAL = "MOI-S1KRIT-KOMP"
    xorkey = "qoef13iurbn2408"
    url = "http://coronavirus.insomnihack.ch/d856c9191394bde38e6efa2e5aa6fb97785954dc97e4d696604bdc4470ef60dd.php?token="
    init_token = "nWeF8V3yvVsmt9y8QqpVZ0esFqLClngk1w8hncWLuc4sedeExAXUSm7kAYyOTbu5WuoR81B3b73notXQJiw1Rv5nXE"
    seperator = "|"
    mp4filename = "SecCam_2013_Trump_Golden_Shower.mp4"

    uname = xor_and_hex(UNAME_REAL, xorkey)
    compname = xor_and_hex(COMPNAME_REAL, xorkey)
    print(compname)
    for rand_byte1 in range(256):
        print("randbyte1 now is:", to_hex(chr(rand_byte1)))

        for rand_couple2 in ["avc1", "iso2", "isom", "mmp4", "mp41", "mp42", "mp71", "msnv", "ndas", "ndsc", "ndsh", "ndsm", "ndsp", "ndss", "ndxc", "ndxh", "ndxm", "ndxp", "ndxs"]:
            print("rand_couple2 now is:", to_hex(rand_couple2))
            mp4_example = "000000"+"1C"+"6674706D" + "6D7034" + "31" # "7970"
            mp4_hex = "000000" + to_hex(chr(rand_byte1)) + "66747970" + to_hex(rand_couple2)
            print(mp4_hex)
            ans = requests.get(url+init_token+seperator+mp4_hex+seperator+uname+seperator+compname)
            if not ans.content == b'starting to get scared now...\n':
                print("==============================")
                print(int(rand_byte1))
                print(int(rand_byte1))
                print(int(rand_byte1))
                print("WOWWW")
                print("=====")
                print(ans.content)



if __name__ == '__main__':
    main()