This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and executes a SQL query synchronously. The results and errors are not returned in HTTP responses. To solve the lab, exploit the vulnerability to infer the administrator password character-by-character using conditional time delays, then log in.