Login sequel

Set username to "admin'/*" and the password to whatever this is so the command executed is

"SELECT username, password FROM `userandpassword` WHERE username='admin/*' AND password='<md5 HASH object @ 0x00000151246A95F8>'"
/* is a comment so everything after that is ignored.

EZ

flag is tjctf{W0w_wHa1_a_SqL1_exPeRt!}

Last updated