SQL Injections Lab

Overview

As a part of the graduation project, I created a lab environment specifically designed for practicing SQL injection techniques. SQL injection is a common web security vulnerability that allows attackers to interfere with the queries an application makes to its database. Understanding and being able to exploit this vulnerability is crucial for anyone interested in cybersecurity and penetration testing. The lab provides a safe and controlled environment where users can learn about SQL injection vulnerabilities and practice various attack techniques with examples built into the environment.

Features

The environment includes a login page and a "search products" page, both of which are intentionally vulnerable to SQL injection attacks. Users can experiment with different SQL injection techniques to bypass authentication, extract data from the database, and understand the impact of this vulnerability.

Technical Details

The page is built with PHP and uses a SQLite database to store user and product information. The SQL queries in the application are executed in a way that makes them susceptible to SQL injection attacks.

Technologies Used

• PHP
• SQLite
• HTML/CSS
• JavaScript
• JQuery
• AJAX