2 Lab SQL injection vulnerability allowing login bypass

• navigate to login page
• fire up burp suite
  • Open burp
  • open burp browser
  • Proxy tab
    • Intercept tab
      • turn intercept on
• enter a generic username and password
• allow burp to intercept
• change username parameter, giving it the value `administrator'--
• click forward
• should be logged in as administrator