> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/tricks/login-bypass.md).

# login bypass

## Burp Intruder SQLi

* [iamkashz/ctf-scripts/auth-bypass-sqli.txt](https://github.com/iamkashz/ctf-scripts/blob/main/auth-bypass-sqli.txt)

## Empty Password Array

* [doyler.net/bypassing-php-strcmp-abctf2016](https://www.doyler.net/security-not-included/bypassing-php-strcmp-abctf2016)

```bash
# try sending password= as empty array via burp
password[]=
password[]=""
```