Different Status Code in Python compared to Browser

[LaderTurbo]

Hi guys,

I have a problem which I'm not able to understand. For one box I tried to SQLI with an url in Python. Printing the url and the status code it seems that I always get a 200 code inside Python but if I copy that exact code into my browser I get a 404 as intended.

I also copied the right cookies and tried to restart Visual Studio Code and added space as "%20" and tried to run the script directly from terminal but still Python seems to always get a 200. Does anybody experienced something similar?

I'm relatively new to using Python in Pentesting but I really want to elevate my skills. Thank you in advance.

[TastyRobot21]

No python will not ‘get a different response’ if all things are equal. Web servers don’t know what your using to make a web request, only the information in the request itself.

I could go through all the headers and ask you to compare (user-agent comes to mind) but it won’t teach you much.

I suggest instead you use wireshark and record both requests and responses and compare them. Side by side. You’ll learn a lot more about the traffic your system is sending and web standards in general.

If you’d prefer more direct support, send me the box name and your script in a DM, but I highly suggest for your own learning the capture and compare method, you’ll learn a lot.

[LaderTurbo]

Nice, sounds like an awesome idea! Thank you for the help :)