LABHARD
Not solved

Lab: Blind SQL injection with conditional responses

This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted cookie. The results of the SQL query are not returned, and the application does not respond with any database error messages. However, the application includes a 'Welcome back!' message in the page if the query returns any rows. Solve the lab by finding the administrator password and logging in.