Hello 
Simple SQL Injection 
URL : http://138.197.41.168/ctf3/login.html
We Can Try To Enter [ admin ] [ Login Bypass Using SQL Injection Payload ] 
Like True ' or 1-- -' 
admin : ' or 1-- -' 
![](http://image.prntscr.com/image/5d3b13e3cfc04a0b98cb663ce528fe79.png)
okay we in login page 
![](http://image.prntscr.com/image/ee7b5858360249cba2adc46785df6dcf.png)
The hint is " FLAG IS AROUND HERE SOMEWHERE " 
i can look in page source code 
![](http://image.prntscr.com/image/5bc37d59a3134194b202af71692ceafc.png)
Okay , The Flag Is 	
Thanks 