login bypass

Burp Intruder SQLi

• iamkashz/ctf-scripts/auth-bypass-sqli.txt

Empty Password Array

• doyler.net/bypassing-php-strcmp-abctf2016

# try sending password= as empty array via burp
password[]=
password[]=""