There is a term:
payload, meaning software spores
The first Flag:
Username:
ADMIN 'of Union the SELECT' 123 'AS password -
Password:
123
After logging see
Private Page
points to get into the first Flag
Second Flag:
directly sending a post request:
curl -v the -X-the POST http://35.196.135.216/633d35b951/page/edit/2
IP pay attention to their replacement.
The first three Flag hard tips are:
Credentials are Secret, Secret Coincidence flags are.?