![question](Screenshot_2.png)1) Another login page is at the link2) looking at the deny list `[    "and",    "1",    "0",    "true",    "false",    "/",    "*",    "=",    "xor",    "null",    "is",    "<",    ">"]` it's a little more in depth than last time.3) We can still bypass is with `' or '5' - '4`.4) Enter the above for the username/password5) We got the flag!![flag](Screenshot_1.png)6) flag: **bcactf{gu3ss\_th3r3s\_n0\_st0pp1ng\_y0u!}**