SQL Injection · Stage 12 of 14

Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.

And we are in! We successfully gained access to the application without having to guess the password, using SQL injection.

www.securebank.com

Welcome back, user@email.com!

Your current balance is $8,266

code
SQL SELECT *
  FROM users
 WHERE email    = ''
   AND password = ''

Application initialized.