SQLI:
http://usage.htb/forget-password