# Challenge Name: wpi-admin-2


## Description

Now that you've hacked into a student worker's account, maybe you can access the admin portal.

## Detailed solution

From the wpi-admin challenge we found the student worker account ```[email protected] 123123```

login at : https://wpiadmin.wpictf.xyz/studLogin

At the student news we can see


Checking student communications, we can see the new link for the admin portal https://wpiadmin.wpictf.xyz/iyghfihGBKHJF9719fn113


I tired to brutforce [email protected] password for the admin portal but no success

I start checking for some Authentication bypass using SQL Injection. I used some payloads https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/SQL%20Injection/Intruder/Auth_Bypass.txt


We were able to bypass the auth, we can login as ```[email protected] / admin' or 1=1--```

We found our flag


## Flag

```
WPI{adM1n_1nj3c710N}
```

Original writeup (https://github.com/BaadMaro/CTF/blob/main/WPICTF-2021/wpi-admin-2).