Audi-1/sqli-labs resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

5833 stars · 1569 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

SQLI-LABS is a self-hosted PHP web application of deliberately vulnerable SQL injection labs for learning and practicing SQL injection techniques. It covers error-based, boolean-blind, and time-based injection scenarios across GET and POST requests, including header injections and WAF bypass challenges.

Use cases

• learn SQL injection hands-on
• practice blind boolean based SQL injection
• practice time-based blind injection
• learn to bypass WAF filters
• practice header and cookie based injections
• train penetration testing students on SQLi
• test SQL injection skills with challenge lessons

When to choose

• you want a safe, self-hosted environment to learn SQL injection techniques
• you are teaching or studying web application security and need structured lessons
• you want to practice WAF bypass, stacked queries, and second-order injection scenarios

When to avoid

• you need a production-ready or secure application
• you want an automated SQL injection scanner rather than a practice platform
• you cannot run a PHP/MySQL web server locally

Facets

learning-resource · maturity maintenance

security penetration-testing web-framework security penetration-testing education web-development databases php self-hosted cross-platform sql-injection sqli vulnerable-app security-training hands-on-labs mysql waf-bypass blind-injection web-server linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Audi-1/sqli-labs")