> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2021/dawgctf-2021/dr.-hrabowskis-great-adventure.md).

# Dr. Hrabowski's Great Adventure

## Problem

President Freeman Hrabowski is having a relaxing evening in Downtown Baltimore. But he forgot his password to give all UMBC students an A in all their classes this semester! Find a way to log in and help him out.

<http://umbccd.io:6100>

(If you get an SSL error, try a different browser)

Author: Clearedge

## Solution

To bypass authentication, the basic payload `username=admin&password=' or 1=1;#` works.

![](/files/-M_EOFvbFlMpNryKFo1e)

The flag is in the image's name attribute.

![](/files/-M_EOIsMB667H13mhiqM)