SQLi-labs

In this repository, I have published the write-ups for all the levels in SQLi-labs.

About

SQLi-Labs is a platform to learn SQLI Vulnerabilities.

Following labs are covered for GET and POST scenarios:

Error Based Injections (Union Select)
- String
- Integer
Error Based Injections (Double Injection Based)
BLIND Injections:
- Boolean Based
- Time Based
Update Query Injection.
Insert Query Injections.
Header Injections.
- Referer based.
- UserAgent based.
- Cookie based.
Second Order Injections
Bypassing WAF
- Bypassing
  - Blacklist filters
  - Stripping comments
  - Stripping OR & AND
  - Stripping SPACES and COMMENTS
  - Stripping UNION & SELECT
- Impidence mismatch
Bypass addslashes()
Bypassing mysql_real_escape_string. (under special conditions)
Stacked SQL injections.
Secondary channel extraction