Skip to content


Switch branches/tags

Name already in use

A tag already exists with the provided branch name. Many Git commands accept both tag and branch names, so creating this branch may cause unexpected behavior. Are you sure you want to create this branch?


Failed to load latest commit information.
Latest commit message
Commit time
October 7, 2014 22:32
October 7, 2014 22:32
October 3, 2014 01:11
October 3, 2014 01:11
October 3, 2014 01:11


SQLI-LABS is a platform to learn SQLI Following labs are covered for GET and POST scenarios:

  1. Error Based Injections (Union Select)

    1. String
    2. Intiger
  2. Error Based Injections (Double Injection Based)

  3. BLIND Injections: 1.Boolian Based 2.Time Based

  4. Update Query Injection.

  5. Insert Query Injections.

  6. Header Injections. 1.Referer based. 2.UserAgent based. 3.Cookie based.

  7. Second Order Injections

  8. Bypassing WAF

    1. Bypassing Blacklist filters Stripping comments Stripping OR & AND Stripping SPACES and COMMENTS Stripping UNION & SELECT
    2. Impidence mismatch
  9. Bypass addslashes()

  10. Bypassing mysql_real_escape_string. (under special conditions)

  11. Stacked SQL injections.

  12. Secondary channel extraction

======================================================================================== Install Instructions:

  1. Unzip the contents inside the apache folder, for example under /var/www
  2. This will create a folder sql-labs under it. else you can use git command from within /var/www folder. /var/www folder and then use following command> git clone sqli-labs
  3. Open the file "" which is under sql-connections folder inside the sql-labs folder.
  4. Update your MYSQL database username and password.(default for Backtrack are used root:toor)
  5. From your browser access the sql-labs folder to load index.html
  6. Click on the link setup/resetDB to create database, create tables and populate Data.
  7. Labs ready to be used, click on lesson number to open the lesson page.
  8. Enjoy the labs


Corrosponding walkthrough video tutorials and explainations can be found at:


you can also find the read along book at, work is under process.


Challenge Section added: Less-54 to Less - 61 special challenge lessons added to repository for testing skills learnt from the other Lab lessons.



SQLI labs to test error based, Blind boolean based, Time based.






No releases published


No packages published