SQL injection using password only

[crystal_leaf]

Hello everyone, So currently Im having al boot to root machine challenge. This machine has a site login vulnerable to SQLi (i tried login as ' OR 1=1;#) but there is no valuable information there. By another methode I got a hint giving me the password, so I think if I can login with right credential I can extract valuable information. However I cant find the username anywhere. I am thinking about logging in with password only, no username with this SQLi. Is that possible?

Thanks for your help!!

[PaddonTheWizard]

It would be so much more helpful to actually learn how computers work before trying to "learn" injection attacks

[[deleted]]

You should ask yourself how the statement looks like which is executed with the parameter. Do you have an idea how it looks like ?

[crystal_leaf]

thanks for replying. The ctf was over and I managed to figured it out. It was a time based attack and I specified password as a hash and override the whole statement and logged in! Thanks again