Lab: login bypass
A concatenated login form on shop.test. Become admin without the password.
The case file shows the login query with your input dropped straight into it. First log in normally and watch it fail, then break out of the string: a single quote ends the name field, OR TRUE keeps the row, and the rest of the line must be neutralized.
Read the code, attempt a normal login, then the injection. The welcome line names the account you became — that is your flag.
That was the whole lesson.
A free account adds the interactive part: the marking quiz, the lab if this lesson carries one, live progress, the timed exam, and a certificate employers can verify.