Tags: sqli web webex 

Rating:

## BCACTF 2.0
# Movie-login-1
-------------------------------------------
## Description
I heard a new movie was coming out... apparently it's supposed to be the SeQueL to "Gerard's First Dance"? Is there any chance you can help me find the flyer?

http://web.bcactf.com:49160/
## Hints

Hint 1 of 1

Are the inputs sanitized?

### 100 points

first in the description the word "SeQueL" has "SQL" highlighted so it's an sqli challenge :P

in the link there were a simple login

since it's sqli i tried typing
```sql
' OR '1'='1
```
in the username and password

and it worked and we got the flag

bcactf{s0_y0u_f04nd_th3_fl13r?}

---------------------------------

Original writeup (https://github.com/systeminsider/CTF-Writeups/blob/main/CTFs-writeups/BCACTF-2.0/webex/Movie-Login-1/Movie-Login-1.md).