Bugku login1

Entering the environment is a web Management system

  Start a trial , Catalog explosion , Universal password , Weak password ,sql Injection is useless

Tips ： Constraint attack

The login echo of any registered user is not something that administrators cannot see flag

That means that we can log in to the administrator to see flag 了

register admin User tips admin Already exists , Then use constraints to attack

Register user name admin                  , The code is random

Direct login admin, Log in with the password registered above