Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

SQL-LAB2 Scripting issue

Mohammed | Last updated: Apr 23, 2021 02:08AM UTC

Hey! Need help with this https://portswigger.net/web-security/sql-injection/lab-login-bypass I have done it. However, I been trying to do it via scripting through burp. I have never done scripting nor have used burp. I been watching this video https://www.youtube.com/watch?v=fMPvCyD2v4w and trying to follow along and learn. Along the way I have done some troubleshooting myself by googling and installing bs4 and other stuff. I went to 26:12 mark in the video and literally stuck there. Idk what to do because when I enter I get so many errors. This is what I get when I type and enter: C:\Users\nadee\Downloads\Portswigger> python login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 39, in <module> if exploit_sqli(s, url, sqli_payload): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 17, in exploit_sqli csrf = get_csrf_token(s, url) File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 10, in get_csrf_token r = s.get(url, verify=False, proxies=proxies) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 555, in get return self.request('GET', url, **kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 542, in request resp = self.send(prep, **send_kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 655, in send r = adapter.send(request, **kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\adapters.py", line 439, in send resp = conn.urlopen( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 696, in urlopen self._prepare_proxy(conn) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 964, in _prepare_proxy conn.connect() File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 359, in connect conn = self._connect_tls_proxy(hostname, conn) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 500, in _connect_tls_proxy return ssl_wrap_socket( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\ssl ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\ssl_.py", line 474, in _ssl_wrap_socket_impl File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\ssl.py", line 500, in wrap_socket return self.sslsocket_class._create( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\ssl.py", line 997, in _create raise ValueError("check_hostname requires server_hostname") ValueError: check_hostname requires server_hostname PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases. PS C:\Users\nadee\Downloads\Portswigger> python login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 39, in <module> if exploit_sqli(s, url, sqli_payload): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 17, in exploit_sqli csrf = get_csrf_token(s, url) File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 10, in get_csrf_token r = s.get(url, verify=False, proxies=proxies) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 555, in get return self.request('GET', url, **kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 542, in request resp = self.send(prep, **send_kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\sessions.py", line 655, in send r = adapter.send(request, **kwargs) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\requests\adapters.py", line 439, in send resp = conn.urlopen( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 696, in urlopen self._prepare_proxy(conn) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connectionpool.py", line 964, in _prepare_proxy conn.connect() File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 359, in connect conn = self._connect_tls_proxy(hostname, conn) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\connection.py", line 500, in _connect_tls_proxy return ssl_wrap_socket( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\ssl ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\site-packages\urllib3\util\ssl_.py", line 474, in _ssl_wrap_socket_impl return ssl_context.wrap_socket(sock) File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\ssl.py", line 500, in wrap_soc return self.sslsocket_class._create( File "C:\Users\nadee\AppData\Local\Programs\Python\Python39\lib\ssl.py", line 997, in _create raise ValueError("check_hostname requires server_hostname") ValueError: check_hostname requires server_hostname PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 1, in <module> import requests ModuleNotFoundError: No module named 'requests' PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 1, in <module> import requests ModuleNotFoundError: No module named 'requests' PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 4, in <module> from bs4 import BeautifulSoup ModuleNotFoundError: No module named 'bs4' PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 39, in <module> if exploit_sqli(s, url, sqli_payload): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 17, in exploit_sqli csrf = get_csrf_token(s, url) File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 10, in get_csrf_token r = s.get(url, verify=False, proxies=proxies) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 555, in get return self.request('GET', url, **kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 542, in request resp = self.send(prep, **send_kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 655, in send r = adapter.send(request, **kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\adapters.py", line 439, in send resp = conn.urlopen( File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connectionpool.py", line 696, in urlopen self._prepare_proxy(conn) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connectionpool.py", line 964, in _prepare_proxy conn.connect() File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connection.py", line 359, in connect conn = self._connect_tls_proxy(hostname, conn) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connection.py", line 500, in _connect_tls_proxy return ssl_wrap_socket( File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\util\ssl_.py", line 432, in ssl_wrap_socket PS C:\Users\nadee\Downloads\Portswigger> python3 login-bypass.py "https://ac951f141faa223680e004c000f2007a.web-security-academy.net/login" "admin" Traceback (most recent call last): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 39, in <module> if exploit_sqli(s, url, sqli_payload): File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 17, in exploit_sqli csrf = get_csrf_token(s, url) File "C:\Users\nadee\Downloads\Portswigger\login-bypass.py", line 10, in get_csrf_token r = s.get(url, verify=False, proxies=proxies) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 555, in get return self.request('GET', url, **kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 542, in request resp = self.send(prep, **send_kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\sessions.py", line 655, in send r = adapter.send(request, **kwargs) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\requests\adapters.py", line 439, in send resp = conn.urlopen( File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connectionpool.py", line 696, in urlopen self._prepare_proxy(conn) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connectionpool.py", line 964, in _prepare_proxy conn.connect() File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connection.py", line 359, in connect conn = self._connect_tls_proxy(hostname, conn) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\connection.py", line 500, in _connect_tls_proxy return ssl_wrap_socket( File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\util\ssl_.py", line 432, in ssl_wrap_socket ssl_sock = _ssl_wrap_socket_impl(sock, context, tls_in_tls) File "C:\Users\nadee\AppData\Local\Packages\PythonSoftwareFoundation.Python.3.9_qbz5n2kfra8p0\LocalCache\local-packages\Python39\site-packages\urllib3\util\ssl_.py", line 474, in _ssl_wrap_socket_impl return ssl_context.wrap_socket(sock) File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.9_3.9.1264.0_x64__qbz5n2kfra8p0\lib\ssl.py", line 500, in wrap_socket return self.sslsocket_class._create( File "C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.9_3.9.1264.0_x64__qbz5n2kfra8p0\lib\ssl.py", line 997, in _create raise ValueError("check_hostname requires server_hostname") ValueError: check_hostname requires server_hostname

Uthman, PortSwigger Agent | Last updated: Apr 23, 2021 08:15AM UTC

Hi Mohammed, This is, unfortunately, beyond the scope of our support service. The post will remain on the forum for a member of the community to contribute. However, I have noticed the errors below that you may want to look into further: ValueError: check_hostname requires server_hostname Python was not found; run without arguments to install from the Microsoft Store, or disable this shortcut from Settings > Manage App Execution Aliases.

cristydavidd | Last updated: Sep 20, 2022 07:10AM UTC

Requests is not a built in module (does not come with the default python installation), so you will have to install requests module: Windows Use pip install requests (or pip3 install requests for python3) if you have pip installed and Pip.exe added to the Path Environment Variable. If pip is installed but not in your path you can use python -m pip install requests (or python3 -m pip install requests for python3) Alternatively from a cmd prompt, use > Path\easy_install.exe requests, where Path is your Python*\Scripts folder, if it was installed. (For example: C:\Python32\Scripts) If you manually want to add a library to a windows machine, you can download the compressed library, uncompress it, and then place it into the Lib\site-packages folder of your python path. (For example: C:\Python27\Lib\site-packages) Linux For Debian/Ubuntu Python2: sudo apt-get install python-requests For Debian/Ubuntu Python3: sudo apt-get install python3-requests http://net-informations.com/python/err/imp.htm

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.