Date: 21 Feb 2025

1. click on oswasp mutiidae II
   

2. owasp 2013->A1-injection(other)->sqli-bypass authentication -> login
   

3. put a ' in the username and login
   

4. the following error will show us (scroll up):
   

5. then in login sign up :
   
   you can see it is bypassed
   o/p is shown below
   

6. now hit the webiste

• username : ' or 1=1 --
• passwd :anything
• you can see you bypassed it
  

7. now keep the username genuine and password try to bypass in Website

• username : admin
• passwd : ' or 1=1 --
• you can now bypass too
  

8. now give username : jsmith ‘ or 1=1 --(space) in Website

• password : random
  

9. username = jsmith' AND 1=1 -- || passwd: anything
   

---****---