blind sql injection
username:
password: (This input is vulnerable to blind SQL injection)
NOTHING FOUND...
When you have found the flag, input its value here!