dibsy / SQLi-lab

An SQL injection playground, from basic to advanced

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SQLi-lab ๐Ÿ’‰

An SQL injection playground, from basic to advanced

Will you solve all the levels ?

Homepage picture

How to use

  • Clone the repo
  • ./build.sh
  • firefox http://172.16.0.2
  • Start hacking !

Tip: add it to your hosts file : echo '172.16.0.2 sqli.lab' >> /etc/hosts && firefox http://sqli.lab ๐Ÿ˜ƒ

Rules

The goal of this lab is to train like a hacker not a script kiddie

  • No automated tools (like SQLmap, dirb...)
  • Only hand-crafted payloads or home-made scripts

Other

It's recommended to not read the source code. If you are stuck : Inspect element for (big) nudges.

I will not provide any solution in this repo, instead I will make a blog post on my website to explain step by step all the levels. You are free to write public solutions on your own blog.

About

An SQL injection playground, from basic to advanced

License:Apache License 2.0


Languages

Language:PHP 80.7%Language:CSS 14.7%Language:Hack 2.1%Language:Dockerfile 0.9%Language:Shell 0.9%Language:TSQL 0.7%