LABEXCELLENT
Not solved

Lab: Blind SQL injection with out-of-band interaction

This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs a SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application's response. To solve the lab, exploit the SQL injection vulnerability to trigger an out-of-band DNS lookup to an external listener.