BSCP

Practice session

A MongoDB-backed login form accepts a username parameter. An attacker submits `{"username": {"$gt": ""}, "password": {"$gt": ""}}`. What type of attack is this?

Loading your practice session…