pebenbow/open-sql-sqli-docker repository overview

⁠SQL Injection Learning Lab

A containerized web application intentionally vulnerable to SQL injection attacks, designed for classroom use. Students run a single Docker container that launches a browser-accessible search interface backed by a PostgreSQL database.

⁠Learning Objectives

Students will practice identifying and exploiting two common SQL injection attack classes:

• Error-based SQLi — extracting database information from verbose error messages returned by the application
• UNION-based SQLi — appending a secondary UNION SELECT query to the attacker-controlled input to retrieve data from other tables or the database catalog

⁠Prerequisites

• Docker Desktop⁠ (Windows or Mac) or Docker Engine (Linux)

⁠Quick Start

docker pull pebenbow/open-sql-sqli-docker:latest

docker run --name sqli-lab -p 8080:8080 pebenbow/open-sql-sqli-docker:latest

Then open http://localhost:8080⁠ in your browser.

⁠Stopping and Removing the Container

docker stop sqli-lab
docker rm sqli-lab

⁠Building Locally

docker build -f Containerfile -t open-sql-sqli-docker .
docker run --name sqli-lab -p 8080:8080 open-sql-sqli-docker

⁠Acknowledgments

Developed by Pete Benbow at Davidson College for use in database and cybersecurity coursework.