Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
SQL Injection 101
Mission
This login form has an SQL Injection vulnerability. Log in as admin without proper credentials and retrieve the flag.
Hints
Hint 1 Show
Try a single quote in the username
Hint 2 Show
Use -- to comment out the rest
Hint 3 Show
Example: admin' --
Hint 4 Show
Also try inputs that make the condition always true