Skip to content
update sqli-labs sources to adapte to php7(use mysqli_xxx functions to replace mysql_xxx ones)
PHP HTML JavaScript CSS
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Less-1 2nd commit Jul 25, 2017
Less-10 chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
Less-11 2nd commit Jul 25, 2017
Less-12 fix sqli-escape-string error in check_input Jul 28, 2017
Less-13 fix sqli-escape-string error in check_input Jul 28, 2017
Less-14 fix sqli-escape-string error in check_input Jul 28, 2017
Less-15 2nd commit Jul 25, 2017
Less-16 2nd commit Jul 25, 2017
Less-17 fix sqli-escape-string error in check_input Jul 28, 2017
Less-18 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-19 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-2 2nd commit Jul 25, 2017
Less-20 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-21 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-22 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-23 2nd commit Jul 25, 2017
Less-24 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-25 2nd commit Jul 25, 2017
Less-26 2nd commit Jul 25, 2017
Less-26a 2nd commit Jul 25, 2017
Less-27 2nd commit Jul 25, 2017
Less-27a 2nd commit Jul 25, 2017
Less-28 2nd commit Jul 25, 2017
Less-28a 2nd commit Jul 25, 2017
Less-29 2nd commit Jul 25, 2017
Less-3 2nd commit Jul 25, 2017
Less-30 2nd commit Jul 25, 2017
Less-31 2nd commit Jul 25, 2017
Less-32 2nd commit Jul 25, 2017
Less-33 2nd commit Jul 25, 2017
Less-34 2nd commit Jul 25, 2017
Less-35 2nd commit Jul 25, 2017
Less-36 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-37 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-38 2nd commit Jul 25, 2017
Less-39 2nd commit Jul 25, 2017
Less-4 2nd commit Jul 25, 2017
Less-40 2nd commit Jul 25, 2017
Less-41 2nd commit Jul 25, 2017
Less-42 2nd commit Jul 25, 2017
Less-43 2nd commit Jul 25, 2017
Less-44 2nd commit Jul 25, 2017
Less-45 2nd commit Jul 25, 2017
Less-46 2nd commit Jul 25, 2017
Less-47 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-48 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-49 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-5 2nd commit Jul 25, 2017
Less-50 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-51 Source-fixing finished. You can do all labs now! Aug 4, 2017
Less-52 2nd commit Jul 25, 2017
Less-53 2nd commit Jul 25, 2017
Less-54 2nd commit Jul 25, 2017
Less-55 2nd commit Jul 25, 2017
Less-56 2nd commit Jul 25, 2017
Less-57 2nd commit Jul 25, 2017
Less-58 2nd commit Jul 25, 2017
Less-59 2nd commit Jul 25, 2017
Less-6 2nd commit Jul 25, 2017
Less-60 2nd commit Jul 25, 2017
Less-61 2nd commit Jul 25, 2017
Less-62 2nd commit Jul 25, 2017
Less-63 2nd commit Jul 25, 2017
Less-64 2nd commit Jul 25, 2017
Less-65 fix sqli-escape-string error in check_input Jul 28, 2017
Less-7 2nd commit Jul 25, 2017
Less-8 2nd commit Jul 25, 2017
Less-9 2nd commit Jul 25, 2017
images 2nd commit Jul 25, 2017
index-1.html_files 2nd commit Jul 25, 2017
index-2.html_files 2nd commit Jul 25, 2017
index-3.html_files 2nd commit Jul 25, 2017
index.html_files 2nd commit Jul 25, 2017
sql-connections 2nd commit Jul 25, 2017
SQL Injections-1.mm chmod 777 * Jul 27, 2017
SQL Injections-2.mm chmod 777 * Jul 27, 2017
SQL Injections-3.mm chmod 777 * Jul 27, 2017
SQL Injections.mm chmod 777 * Jul 27, 2017
SQL Injections.png chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
index-1.html chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
index-2.html chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
index-3.html chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
index.html chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
readme.md chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017
sql-lab.sql chmod 777 * Jul 27, 2017
sqli-answers-and-notes.md Source-fixing finished. You can do all labs now! Aug 4, 2017
sqli-labs-usermanual-cn.pdf Source-fixing finished. You can do all labs now! Aug 4, 2017
tomcat-files.zip chmod -x *.png *.pdf *.zip *.html *.md Jul 27, 2017

readme.md

README

SQLI-LABS is a platform to learn SQLI(https://github.com/Audi-1/sqli-labs.git).

SQLI-LABS-PHP7 is based on SQLI-LABS

Following labs are covered for GET and POST scenarios:

  1. Error Based Injections (Union Select)

    1. String
    2. Intiger
  2. Error Based Injections (Double Injection Based)

  3. BLIND Injections: 1.Boolian Based 2.Time Based

  4. Update Query Injection.

  5. Insert Query Injections.

  6. Header Injections. 1.Referer based. 2.UserAgent based. 3.Cookie based.

  7. Second Order Injections

  8. Bypassing WAF

    1. Bypassing Blacklist filters Stripping comments Stripping OR & AND Stripping SPACES and COMMENTS Stripping UNION & SELECT
    2. Impidence mismatch
  9. Bypass addslashes()

  10. Bypassing mysqli_real_escape_string. (under special conditions)

  11. Stacked SQL injections.

  12. Secondary channel extraction

======================================================================================== Install Instructions:

  1. Unzip the contents inside the apache folder, for example under /var/www
  2. This will create a folder sql-labs under it. else you can use git command from within /var/www folder. /var/www folder and then use following command> git clone https://github.com/skyblueee/sqli-labs-php7.git sqli-labs
  3. Open the file "db-creds.inc" which is under sql-connections folder inside the sql-labs folder.
  4. Update your MYSQL database username and password.(default for kali are used root:)
  5. From your browser access the sql-labs folder to load index.html
  6. Click on the link setup/resetDB to create database, create tables and populate Data.
  7. Labs ready to be used, click on lesson number to open the lesson page.
  8. Enjoy the labs

==========================================================================================

Corrosponding walkthrough video tutorials and explainations can be found at: (https://github.com/Audi-1/sqli-labs.git).

You can’t perform that action at this time.