Get full access to Burp Suite Cookbook and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

How to do it...

From the OWASP Mutilliae II menu, select Login by navigating to OWASP 2013 | A1-Injection (SQL) | SQLi – Bypass Authentication | Login:

At the Login screen, place invalid credentials into the username and password text boxes. For example, username is tester and password is tester. Before clicking the Login button, let's turn on Proxy | Interceptor.
Switch to the Burp Proxy | Intercept tab. Turn the Interceptor on by toggling to Intercept is on.

While Proxy | Interceptor has the request paused, insert the new payload of ' or 1=1--<space> within the username parameter and click the Login button:

Click the Forward button. ...

Get Burp Suite Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now