SQL Injection - Login Bypass
Beginner
A03:2021 - Injection
100 points
Challenge Description
This login form is vulnerable to SQL injection. Your goal is to bypass the
authentication and log in as the admin user without knowing the password.
Once you successfully authenticate as admin, you will find a secret flag in the user's data. Submit this flag to complete the challenge.
Learning Objective: Understand how unsanitized user input can lead to SQL injection vulnerabilities that bypass authentication.
Vulnerable Login Form
Submit Flag
Hints
-10% per hint
Debug Options