Can only concatenate str

[ghost]

python joomblah.py http://10.xx.xx.xx.

Traceback (most recent call last): File "joomblah.py", line 186, in sys.exit(main("http://IP:8080/joomla")) File "joomblah.py", line 183, in main pwn_joomla_again(options) File "joomblah.py", line 147, in pwn_joomla_again tables = extract_joomla_tables(options, sess, token) File "joomblah.py", line 74, in extract_joomla_tables result = joomla_370_sqli_extract(options, sess, token, "TABLE_NAME", "FROM information_schema.tables WHERE TABLE_NAME LIKE 0x257573657273 LIMIT " + str(offset) + ",1" ) File "joomblah.py", line 46, in joomla_370_sqli_extract result += value TypeError: can only concatenate str (not "bytes") to str

[somesh-bhandarkar]

Try explicitly casting the variable. eg. result += str(value)

[stempst0r]

Try explicitly casting the variable. eg. result += str(value)

Changing this, the script runs without an error, but the output is not satisfying at all. It looks like something is missing/cut off:

python3 joomblah.py http://10.XXX.XXX.XXX/
[-] Fetching CSRF token
 [-] Testing SQLi
  -  Found table: b'fb9j5_users'
  -  Extracting users from b'fb9j5_users'
  -  Extracting sessions from b'fb9j5_usession

[samjain2907]

Getting the same error!

[mild0wl]

Do any one found the solution.

[Scytex]

Run the script using python2 instead of python3 if you get an error message about a missing request module, install it via pip.

[0xhsn]

1. Install pip with Python2.7 curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py python2.7 get-pip.py
2. Install the "requests" module python2.7 -m pip install requests
3. Run the exploit python2.7 joomblah.py <IP>

[mats-codes]

Had the same issue. Created a pull request which contains a python3-compatible joombla.py file.

https://github.com/XiphosResearch/exploits/pull/18

[owaisqaa]

1.Install pip with Python2.7 ### curl https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py

python2.7 get-pip.py

2.Install the "requests" module

python2.7 -m pip install requests

3.Run the exploit ### python2.7 joomblah.py <IP>

Thanks timyc00k i just changed the first step.

[theperrinpages]

1. Install pip with Python2.7 curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py python2.7 get-pip.py
2. Install the "requests" module python2.7 -m pip install requests
3. Run the exploit python2.7 joomblah.py <IP>

solved.. thanks