cristianmp80/sqlinjection-lab

Dockerized SQLi Simulation Lab based on http://www.sqlinjection.net/simulation/ and https://github.com/EvilFreelancer/alpine-apache-php5

Dockerized SQLi Lab

Based on:

• SQLi Simulation Lab http://www.sqlinjection.net/simulation/
• Alpine-based LAP Server with PHP extensions https://github.com/EvilFreelancer/alpine-apache-php5

Where do I put my files?

• MySQL Dump -> dump/
• vulnerable php app -> html/public

Note: the database volume will be stored in ./database

How to start the lab?

login, pass and db name are hardcoded in docker-compose.yml and html/public/includes/config.inc. To start the lab, just run:

$ docker-compose up -d

Wait a minute before trying to connect to http://localhost:8888 (otherwise, you will get "Connection refused" errors from MariaDB/MySQL)

How to stop the lab?

$ docker compose down