Some SQLi Lab

Blacklist-based SQLi protection bypass lab

Let Play

Please find a bud in the app.py file. Then, hack this lab on your own environment. Next, get a real flag https://some-sqli-lab.herokuapp.com/. Finally, submit flag on https://lab.suam.wtf/.

Running Locally

Make sure you have Docker installed locally.

$ git clone https://github.com/suam-team/some-sqli-lab.git
$ cd some-sqli-lab
$ docker build -t some-sqli-lab .
$ docker run -p 5000:1337 -d -e PORT=1337 -e FLAG=flag{IloveYou} --rm some-sqli-lab

Your app should now be running on localhost:5000.

Deploying to Heroku

$ heroku create
$ git push heroku main
$ heroku open

or