← back to room
SQL Injection
NewsDesk — Date filter
Scenario
The archive filter accepts a date and returns only how many articles matched—no row details. Different inputs change the count in predictable ways. Prove you can distinguish true from false conditions blindly.
Your approach
- Submit a normal date and note the numeric count returned.
- Append a always-true condition and confirm the count stays the same.
- Append an always-false condition and confirm the count drops.
- Use that behaviour to show boolean inference works on this endpoint.
- Submit the task flag once the lab registers a successful blind test.
NewsDesk
Archive filter
Articles by date
Filter by date suffix. Only a count is returned — watch how the response changes.
// count appears here
Flag: — submit it on the room page.