Skip to content
Projects

Audi-1/sqli-labs

View on GitHub

Audi-1/sqli-labs has 5,872 GitHub stars and 1,568 forks. GitHot measured +1 stars in 24 hours and +3 in 7 days. Last checked 2026-11-12 08:29 UTC. Last push 2023-12-11.

How these counts are measured

SQLI labs to test error based, Blind boolean based, Time based.

5,872 stars1,568 forks +1 in 24h

Measured star growth

in 24h
+1
in 7 days
+3
in 15 days
Collecting history
in 1 month
Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

README.md

Original

README

SQLI-LABS is a platform to learn SQLI Following labs are covered for GET and POST scenarios:

  1. Error Based Injections (Union Select)

    1. String
    2. Intiger

  2. Error Based Injections (Double Injection Based)

  3. BLIND Injections: 1.Boolian Based 2.Time Based

  4. Update Query Injection.

  5. Insert Query Injections.

  6. Header Injections. 1.Referer based. 2.UserAgent based. 3.Cookie based.

  7. Second Order Injections

  8. Bypassing WAF

    1. Bypassing Blacklist filters Stripping comments Stripping OR & AND Stripping SPACES and COMMENTS Stripping UNION & SELECT
    2. Impidence mismatch

  9. Bypass addslashes()

  10. Bypassing mysql_real_escape_string. (under special conditions)

  11. Stacked SQL injections.

  12. Secondary channel extraction

======================================================================================== Install Instructions:

  1. Unzip the contents inside the apache folder, for example under /var/www
  2. This will create a folder sql-labs under it. else you can use git command from within /var/www folder. /var/www folder and then use following command> git clone https://github.com/Audi-1/sqli-labs.git sqli-labs
  3. Open the file "db-creds.inc" which is under sql-connections folder inside the sql-labs folder.
  4. Update your MYSQL database username and password.(default for Backtrack are used root:toor)
  5. From your browser access the sql-labs folder to load index.html
  6. Click on the link setup/resetDB to create database, create tables and populate Data.
  7. Labs ready to be used, click on lesson number to open the lesson page.
  8. Enjoy the labs

==========================================================================================

Corrosponding walkthrough video tutorials and explainations can be found at:

  1. http://dummy2dummies.blogspot.com
  2. http://www.securitytube.net/user/Audi
  3. https://www.facebook.com/sqlilabs

you can also find the read along book at https://leanpub.com/SQLI-LABS, work is under process.

==========================================================================================

Challenge Section added: Less-54 to Less - 61 special challenge lessons added to repository for testing skills learnt from the other Lab lessons.

==========================================================================================

Explore related projects

Asabeneh/30-Days-Of-Python

The 30 Days of Python programming challenge is a step-by-step guide to learn the Python programming language in 30 days. This challenge may take more than 100 days. Follow your own pace. These videos may help too: https://www.youtube.com/channel/UC7PNRuno1rzYPb1xLa4yktw

78,618 stars

grafana/grafana

The open and composable observability and data visualization platform. Visualize metrics, logs, and traces from multiple sources like Prometheus, Loki, Elasticsearch, InfluxDB, Postgres and many more.

77,859 stars

redis/redis

For developers, who are building real-time data-driven applications, Redis is the preferred, fastest, and most feature-rich cache, data structure server, and document and vector query engine.

77,472 stars

apache/superset

Apache Superset is a Data Visualization and Data Exploration Platform

75,495 stars