Skip to main content

Login Admin

Difficulty: 🌟🌟

Description: Log in with the administrator's user account.

Category: Injection

Tags: Good for Demos, Tutorial

Solution:

With the email format from Emma's account (Visual Geo Stalking), I think the admin account should have the same email format: admin@juice-sh.op. So I tried SQL Injection with user email: admin@juice-sh.op'-- and password is anything characters:

SQL injection

And finally, I can log in using admin account:

successfully logged in