Tags: sqli web webex
Rating:
## BCACTF 2.0
# Movie-login-1
-------------------------------------------
## Description
I heard a new movie was coming out... apparently it's supposed to be the SeQueL to "Gerard's First Dance"? Is there any chance you can help me find the flyer?
http://web.bcactf.com:49160/
## Hints
Hint 1 of 1
Are the inputs sanitized?
### 100 points
first in the description the word "SeQueL" has "SQL" highlighted so it's an sqli challenge :P
in the link there were a simple login
since it's sqli i tried typing
```sql
' OR '1'='1
```
in the username and password
and it worked and we got the flag
bcactf{s0_y0u_f04nd_th3_fl13r?}
---------------------------------