{'context_id': 410, 'vulnerable': True, 'processing': False, 'request': {'url': 'https://cooper.info/postscategory.htm', 'method': 'GET', 'headers': {'HOST': '127.0.0.1:5000', 'USER_AGENT': 'Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:134.0) Gecko/20100101 Firefox/134.0', 'ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8', 'ACCEPT_LANGUAGE': 'en-US,en;q=0.5', 'ACCEPT_ENCODING': 'gzip, deflate, br, zstd', 'CONNECTION': 'keep-alive', 'REFERER': 'http://127.0.0.1:5000/file-upload', 'COOKIE': 'csrftoken=7GgBqVlBL6WuGdfu3e6EBXep8N5vFiVm; grafana_session=54c841e9cb2f4956a7c791efd284d120; grafana_session_expiry=1735995560; user_id=2; session_token=b3c634c91e1711c794704a031918a34b', 'UPGRADE_INSECURE_REQUESTS': '1', 'SEC_FETCH_DEST': 'document', 'SEC_FETCH_MODE': 'navigate', 'SEC_FETCH_SITE': 'same-origin', 'SEC_FETCH_USER': '?1', 'PRIORITY': 'u=0, i', 'Content-Type': 'application/json', 'User-Agent': 'Opera/9.61.(Windows 98; Win 9x 4.90; ks-IN) Presto/2.9.170 Version/10.00'}, 'body': b'csrfmiddlewaretoken=3c443fde-aa39-4738-836e-bdfb6abacfb8&newpass1=TnrLGXX9&newpass2=FqRH7gmz'}, 'control_flow': {0: "api_key = request.cookies.get('api_key')", 1: 'if API_KEY is None or api_key == API_KEY:', 2: 'return f(*args, **kwargs)', 3: 'pass', 4: "if request.method == 'GET':", 5: 'return sql_injection_login_page(request, app)', 6: 'return render_template(', 7: "'sql_injection/login.html',", 8: "sql='',", 9: 'logged=None', 10: 'return render_template(', 11: '{% extends "base.html" %}', 12: '{% block content %}', 13: '', 14: '<h1 class="title">SQL Injection</h1>', 15: '<div class="block">', 16: '</div>', 17: '{% elif logged == False %}', 18: '', 19: '<div class="block">', 20: '<pre>', 21: 'Password: Admin123', 22: '<code lang="sql">', 23: '{{ sql }}', 24: '</code>', 25: '{{ sql }}', 26: '</code>', 27: '{{ sql }}', 28: '</div>', 29: '<meta name="viewport" content="width=device-width, initial-scale=1.0">', 30: '<link rel="stylesheet" href="{{ url_for(\'static\', filename=\'assets/bulma.min.css\') }}">', 31: '<title>Vuln Python App</title>', 32: '<body>', 33: '{% include "./components/navbar.html" %}', 34: '<section class="section">', 35: '{% block content %}{% endblock %}', 36: '</div>', 37: '</section>', 38: '', 39: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 40: '', 41: '<a role="button" class="navbar-burger" aria-label="menu" aria-expanded="False" data-target="navbarBasicExample">', 42: '<span aria-hidden="True"></span>', 43: '<span aria-hidden="True"></span>', 44: '</div> -->', 45: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 46: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 47: '', 48: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 49: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 50: '<div id="navbarBasicExample" class="navbar-menu">', 51: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 52: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 53: '<div class="navbar-start">', 54: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 55: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 56: '<a class="navbar-item" href="{{ url_for(\'home\') }}">', 57: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 58: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 59: 'Home', 60: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 61: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 62: '</a>', 63: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 64: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 65: '', 66: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 67: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 68: '<div class="navbar-item has-dropdown is-hoverable">', 69: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 70: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 71: '<a class="navbar-link">', 72: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 73: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 74: 'SQL Injection', 75: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 76: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 77: '</a>', 78: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 79: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 80: '', 81: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 82: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 83: '<div class="navbar-dropdown">', 84: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 85: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 86: '<a class="navbar-item" href="{{ url_for(\'sql_injection_login\') }}">', 87: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 88: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 89: 'Login', 90: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 91: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 92: '</a>', 93: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 94: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 95: '<a class="navbar-item" href="{{ url_for(\'sql_injection_search\') }}?q=">', 96: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 97: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 98: 'Search', 99: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 100: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 101: '</a>', 102: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 103: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 104: '</div>', 105: '<script src="{{ url_for(\'static\', filename=\'assets/global.js\') }}"></script>', 106: '<script src="{{ url_for(\'static\', filename=\'assets/axios.min.js\') }}"></script>', 107: '<script>', 108: "// var googleCaptchaKey = '6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI';", 109: '<form action="/sql-injection/login" method="post" style="max-width: 300px;">', 110: '<div class="field">', 111: '<label class="label">Username</label>', 112: '<input class="input" name="username" type="text" placeholder="myuser" required>', 113: '</div>', 114: '</div>', 115: '<label class="label">Password</label>', 116: '<div class="control">', 117: '<input class="input" name="password" type="password" placeholder="********" required>', 118: '</div>', 119: '<div class="field is-grouped">', 120: '</div>', 121: '{% if logged == True %}', 122: '<div class="notification is-success">', 123: "// var googleCatpchaSecretKey = '6LeIxAcTAAAAAGG-vFI1TnRWxMZNFuojJ4WifJWe';", 124: '', 125: "var googleCaptchaKey = '{{ GOOGLE_RECAPTCHA_SITE_KEY }}';", 126: "var googleCatpchaSecretKey = '{{ GOOGLE_RECAPTCHA_SECRET_KEY }}';", 127: '', 128: '</script>', 129: '', 130: '{% block js %}{% endblock %}', 131: '</body>', 132: '</html>', 133: 'None', 134: 'None', 135: 'None', 136: 'None', 137: 'None', 138: '</html>'}, 'response': {'status_code': '404', 'headers': {'Content-Type': 'text/html; charset=utf-8', 'Content-Length': '4050'}}}