Also, I noticed that your session id in Burp at 0:44 (nZ..) totally different from what you have in the code at 2:03 (Fo..) & your current cookie at 2:15 (nZ..) Could you please share when did you get that session at 2:03 (Fo..)?
The session id changes every time you log out and back in, so this is why it’s different as these videos are made over the course of a couple of days. Sorry for the inconsistency, for all intents and purposes they might as well be the same
Thanks for explaining this assignment, I use kali linux VM, I am able to intercept the POST request from Burp and send it to repeter and able to get my JSESSIONID from the browser, and run your script by entering my username, pass and JSESIONID in the script but when I run the script it runs infinite and then stops with "session find 0 and starting session for 0 at 0" and not able to find any sessions, is there is something I miss
By the way... if the script is not working, you could check the / at the end of the endpoint before the parameters. For example here: instead of login/?username=$username do login?username=$username in both URLs
![[A1] Insecure Direct Object References - WebGoat](http://i.ytimg.com/vi/8fMFLqbd0-Y/mqdefault.jpg)
![[A1] Insecure Direct Object References - WebGoat](/img/tr.png)
![[A1] Missing Function Level Access Control - WebGoat](http://i.ytimg.com/vi/C-MTbhfXbgg/mqdefault.jpg)
This is actually Incredible. I never would have thought of writing a Script, but I love it. You deserve many more Subs!
Thank you for the encouragement! I’m glad I could help
Thanks for sharing!!!!!
My pleasure!!
You are absolute brilliant! thank you for sharing this.
Thank you for the kind words!
i was so suprised when i saw u had only 80 subscribers, i thought you were gonna have like around 120k or sommething
What a big compliment to casually hand out.. thank you!
This in incredible thank you so much
I’m glad I could help!
Also, I noticed that your session id in Burp at 0:44 (nZ..) totally different from what you have in the code at 2:03 (Fo..) & your current cookie at 2:15 (nZ..)
Could you please share when did you get that session at 2:03 (Fo..)?
The session id changes every time you log out and back in, so this is why it’s different as these videos are made over the course of a couple of days. Sorry for the inconsistency, for all intents and purposes they might as well be the same
Thanks for explaining this assignment, I use kali linux VM, I am able to intercept the POST request from Burp and send it to repeter and able to get my JSESSIONID from the browser, and run your script by entering my username, pass and JSESIONID in the script but when I run the script it runs infinite and then stops with "session find 0 and starting session for 0 at 0" and not able to find any sessions, is there is something I miss
Same thing happened to me how did u fix it
Thanks, but kindly increase the font size, its barely visible.
Bro, Zoom the font size.+++
Not Vim :D
Te amo ❤❤🩹, do you know how hard I was trying to solve this problem, keep uploading more videos 😘
Buena I’m glad I was able to help
By the way... if the script is not working, you could check the / at the end of the endpoint before the parameters. For example here: instead of login/?username=$username do login?username=$username in both URLs