This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application's response. To solve the lab, exfiltrate the administrator's password via out-of-band DNS resolution and log in.