SQL Injection Test

Today, the guys from @hackerdna give us the opportunity to play with SQLi, you can try the challenge here: https://hackerdna.com/labs/sql-injection-test

So, basically we must find an SQLi which bypass the login

Not going to explain what’s an SQLi, since there is several sites that explain better than me, like https://portswigger.net/web-security/sql-injection/

Get Malekith’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Since, it’s a basic SQLi, we can try a basic SQLi like admin’ or ‘1’=’1 and any password to grab the flag