• Lab 16: Lab: Blind SQL injection with out-of-band data exfiltration

    Lab 16: Lab: Blind SQL injection with out-of-band data exfiltration

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application’s response. However, you can trigger out-of-band interactions with an external domain. The database…

  • Lab 15 : Lab: Blind SQL injection with out-of-band interaction

    Lab 15 : Lab: Blind SQL injection with out-of-band interaction

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The SQL query is executed asynchronously and has no effect on the application’s response. However, you can trigger out-of-band interactions with an external domain. To solve…

  • Lab 14 : Blind SQL injection with time delays and information retrieval

    Lab 14 : Blind SQL injection with time delays and information retrieval

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The results of the SQL query are not returned, and the application does not respond any differently based on whether the query returns any rows or…

  • Lab 13 : Blind SQL injection with time delays

    Lab 13 : Blind SQL injection with time delays

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The results of the SQL query are not returned, and the application does not respond any differently based on whether the query returns any rows or…

  • Lab 12 : Blind SQL injection with conditional errors

    Lab 12 : Blind SQL injection with conditional errors

    Problem Statement : This lab contains a blind SQL injection vulnerability. The application uses a tracking cookie for analytics, and performs an SQL query containing the value of the submitted cookie. The results of the SQL query are not returned, and the application does not respond any differently based on whether the query returns any rows. If…