Security Lab

Local demo only. Break the unsafe login, then use the safe path. Never try payloads on real websites.

UNSAFE

Login (vulnerable)

Try username: admin' OR '1'='1 --

Username Password

SAFE

Login (parameterized)

Seed account: admin / admin123

Username Password

REGISTER

Register (bcrypt hash)

Username Password

Response

Submit a form…

plaintext demo file · stored hashes