Webgoat Tutorial Learning (vi)--Log spoofing (Spoofing)

The grey area below represents what's going to being logged in the Web server ' s log file.
* Your goal is to make it like a username "admin" have succeeded into logging in.
* Elevate your attack by adding a script to the log file.

The gray box section is the log Output section, the log record is login failed for username: input username

However, when the input username is Smith%0d%0alogin succeeded for username admin, as shown, the Admin account login is considered to be successful.

Webgoat Tutorial Learning (vi)--Log spoofing (Spoofing)