linuxsec/sqli-labs repository overview

⁠SQL Injection Labs

This repository contains a web application vulnerable to SQL Injection attacks. Created for tutorial purposes on LinuxSec. However, you are welcome to use it for learning "Basic SQL Injection".

⁠Install

You can setup your own web server and database, and then copy the content from src folder. But the simple way to setup the lab is using docker.

docker run --rm -it -p 1337:80 linuxsec/sqli-labs

⁠Screenshot

• Union Based SQL Injection at Index

• Error Based SQL Injection at Login Page

• Shell Upload via SQL Injection

• etc.

⁠Tutorial

• Tutorial Basic SQL Injection Manual Lengkap⁠

⁠Disclaimer

This application is intentionally vulnerable for educational purposes. Deploying this application on a production server is strictly prohibited.