Web - Server

in this problem i guess the code is "(&(mail=*input*))" and we are going to find admin’s password
but there is a problem that userPassword can not be filter by "*password*" ,and i can not find another way to blind inject LDAP
Please tell me the way..  😢