Rating:

this challenge teel us use id as parameter, so i added
and i try to check what i look like on id=1

![](https://miro.medium.com/max/764/1*Ro4ksQaGI0yY5_iCeSHFyA.png)

and id=2

![](https://miro.medium.com/max/764/1*oOGqiqkVOXVj-6LR-hP0kQ.png)

so i decide to use bash to check all the possible id, and i found the flag

```
for x in {0..100};do curl "simplesql.darkarmy.xyz/index.php?id=$x" | grep Username;done
```

![](https://miro.medium.com/max/764/1*ngsxz2ri2k5aysl2Cwqbqg.png)

> Flag: darkCTF{it_is_very_easy_to_find}

[my blog](http://medium.com)