Sign in
Standard user: guest / guest · Admin: admin / secret.
Or bypass the password entirely with an injection. You land on a role-based dashboard.
SQLi payloads (click to fill username, leave password blank):
' OR 1=1 --
Response will appear here…
Log in as guest to see the standard-user dashboard, then edit your
dpwaf_session cookie in DevTools to escalate to the admin dashboard.