Can only concatenate str

[ghost]

python joomblah.py http://10.xx.xx.xx.

Traceback (most recent call last):
File "joomblah.py", line 186, in
sys.exit(main("http://IP:8080/joomla"))
File "joomblah.py", line 183, in main
pwn_joomla_again(options)
File "joomblah.py", line 147, in pwn_joomla_again
tables = extract_joomla_tables(options, sess, token)
File "joomblah.py", line 74, in extract_joomla_tables
result = joomla_370_sqli_extract(options, sess, token, "TABLE_NAME", "FROM information_schema.tables WHERE TABLE_NAME LIKE 0x257573657273 LIMIT " + str(offset) + ",1" )
File "joomblah.py", line 46, in joomla_370_sqli_extract
result += value
TypeError: can only concatenate str (not "bytes") to str

[somesh-bhandarkar]

Try explicitly casting the variable.
eg. result += str(value)

[stempst0r]

Try explicitly casting the variable.
eg. result += str(value)

Changing this, the script runs without an error, but the output is not satisfying at all. It looks like something is missing/cut off:

python3 joomblah.py http://10.XXX.XXX.XXX/
[-] Fetching CSRF token
 [-] Testing SQLi
  -  Found table: b'fb9j5_users'
  -  Extracting users from b'fb9j5_users'
  -  Extracting sessions from b'fb9j5_usession

[samjain2907]

Getting the same error!

[mild0wl]

Do any one found the solution.

[Scytex]

Run the script using python2 instead of python3
if you get an error message about a missing request module, install it via pip.

[0xhsn]

1. Install pip with Python2.7
   curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
python2.7 get-pip.py
2. Install the "requests" module
   python2.7 -m pip install requests
3. Run the exploit
   python2.7 joomblah.py <IP>

[mats-codes]

Had the same issue. Created a pull request which contains a python3-compatible joombla.py file.

#18

[owaisqaa]

1.Install pip with Python2.7
### curl https://bootstrap.pypa.io/pip/2.7/get-pip.py -o get-pip.py

python2.7 get-pip.py

2.Install the "requests" module

python2.7 -m pip install requests

3.Run the exploit
### python2.7 joomblah.py

Thanks timyc00k i just changed the first step.

[theperrinpages]

1. Install pip with Python2.7
   curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
python2.7 get-pip.py
2. Install the "requests" module
   python2.7 -m pip install requests
3. Run the exploit
   python2.7 joomblah.py <IP>

solved.. thanks