Bypass a Login

Bypassing Logins with SQLi

Now that you understand the concept, it is time to apply it.

A classic SQL injection bypass payload for a login form is:

Username: admin'-- Password: anything

Or alternatively:

Username: ' OR '1'='1 Password: ' OR '1'='1

The second payload makes the WHERE clause always true, returning all rows.

Your Mission

The target has a login form at:

http://15.204.80.238/login

Use SQL injection to bypass the login without knowing the real password.

Once you get in, find the flag on the page you are redirected to.

Step by Step

1. Go to the login page
2. Enter the payload in the username field: admin'--
3. Enter anything in the password field
4. Submit and see what happens