example: 282e1d4d87ba12 -> 28241343871012 PC=$(curl -k https://192.168.0.100/clown/index.php |grep -o "pc='[0-9a-f]*'" |sed "s/pc='\([0-9a-f]*\)'/\1/") echo "pc: $PC" V=$(echo $PC |python -c 'import sys;print "".join("%i" % (int(c,16)%10) for c in sys.stdin.readline().strip())') echo "val: $V" sleep 2 # don't be a computer curl -k \ -H "Referer: https://192.168.0.100/clown/index.php" \ -H "User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6" \ -H "Accept:text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5" \ -H "Accept-Language: en-us,en;q=0.5" \ -H "Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7" \ -H "Keep-Alive: 300" \ -d "q=$V" https://192.168.0.100/clown/password.php n0m0r3cl0wnz1pr0m1s3