OWASP TOP 10 View Guide

SQL Injection - Login Bypass

Beginner A03:2021 - Injection 100 points
Challenge Description

This login form is vulnerable to SQL injection. Your goal is to bypass the authentication and log in as the admin user without knowing the password.

Once you successfully authenticate as admin, you will find a secret flag in the user's data. Submit this flag to complete the challenge.

Learning Objective: Understand how unsanitized user input can lead to SQL injection vulnerabilities that bypass authentication.

Vulnerable Login Form
Submit Flag
Hints -10% per hint
Debug Options
An error has occurred. This application may no longer respond until reloaded. Reload Dismiss