Whack in the box

There's a web hacking competition this afternoon.
OMG.. so so so difficult... Argghhhh.. Feel insulted.. lolz

I tried to refresh my mind on the SQL injection and similar thingy this weekend. But they are useless. All I get is "wrong username". =.="

For the 20 minutes I tried all the combination that I know. But none works...
PAM system...