SQL Injection Authentication ByPass on Mutillidae

Posted by shinigami at 05:31 Read our previous post

In this post, I will write about SQL Injection bypass on Mutillidae.

1. Open http://localhost/mutillidae/?page=login.php
2. Insert single quote in the form username and form password
   You can see that some errors appears
   
   
   From the error, we know that the query of SQL is :
   

   SELECT * FROM accounts WHERE username=''' AND password='''

   To begin the attackt, we need to modify this query. I will using this query for input username and password :
   

   x' OR '1'='1

   Now, enter the query above into username and password form.
   
3. Wow, I'm loggin as admin