├── .dockerignore
├── Dockerfile
├── Injecting SQLite database based application.pdf
├── README.md
├── docker-compose.yml
├── head.php
├── ica-lab.db
├── images
    ├── head.jpg
    └── who.jpg
├── index.php
├── sqlite lab 2.png
├── sqlite lab 3.png
├── sqlite lab 4.png
└── sqlite lab.png


/.dockerignore:
--------------------------------------------------------------------------------
1 | README.md
2 | Dockerfile
3 | docker-compose.yml
4 | .git
5 | Injecting SQLite database based application.pdf
6 | 


--------------------------------------------------------------------------------
/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM php:8.1-apache-bullseye
2 | MAINTAINER jose nazario <jose@monkey.org>
3 | LABEL version="1.1" description="sqlite-lab Docker image"
4 | 
5 | RUN apt-get update && \
6 |     mkdir /var/www/html/sqlite-lab
7 | 
8 | COPY . /var/www/html/sqlite-lab
9 | 


--------------------------------------------------------------------------------
/Injecting SQLite database based application.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/Injecting SQLite database based application.pdf


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # sqlite-lab
 2 | This code is vulnerable to SQL Injection and having SQLite database. 
 3 | 
 4 | During practicing one challenge i faced SQLI vulnerable script with SQLite database integrated with it
 5 | 
 6 | For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
 7 | 
 8 | Types of SQL Injection in this Lab
 9 | 
10 | 1. Union based SQL Injection (numaric based)
11 | 
12 | 2. Union based SQL Injection (String based)
13 | 
14 | 3. Boolean based Blind SQL Injection 
15 | 
16 | # Guide for learning SQLIte SQL Injection 
17 | 
18 | https://github.com/incredibleindishell/sqlite-lab/blob/master/Injecting%20SQLite%20database%20based%20application.pdf
19 | 
20 | # Note: -
21 | 
22 | Those users who are using ubuntu, make sure php-sqlite package is installed in system
23 | 
24 | command to install php-sqlite package
25 | 
26 | apt-get install php5-sqlite
27 | 
28 | # Lab screenshot
29 | 
30 | 
31 | screenshot 1
32 | 
33 | <img src="https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/f4d66f83e605ee59a0eaffa478a4d1db4578845b/sqlite%20lab.png">
34 | 
35 | 
36 | screenshot 2
37 | 
38 | <img src="https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/f4d66f83e605ee59a0eaffa478a4d1db4578845b/sqlite%20lab%202.png">
39 | 
40 | screenshot 3
41 | 
42 | <img src="https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/f4d66f83e605ee59a0eaffa478a4d1db4578845b/sqlite%20lab%203.png">
43 | 
44 | screenshot 4
45 | 
46 | <img src="https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/f4d66f83e605ee59a0eaffa478a4d1db4578845b/sqlite%20lab%204.png">
47 | 
48 | --==[[Greetz to]]==--
49 | 
50 | Guru ji zero ,code breaker ica, root_devil, google_warrior,INX_r0ot,Darkwolf indishell,Baba ,Silent poison India,Magnum sniper,ethicalnoob Indishell,Local root indishell,Irfninja indishell, Reborn India,L0rd Crus4d3r,cool toad,Hackuin,Alicks,Gujjar PCP,Bikash,Dinelson Amine,Th3 D3str0yer,SKSking,rad paul,Godzila,mike waals,zoo zoo,cyber warrior,shafoon, Rehan manzoor, cyber gladiator,7he Cre4t0r,Cyber Ace, Golden boy INDIA,Ketan Singh,Yash,Aneesh Dogra,AR AR,saad abbasi,hero,Minhal Mehdi ,Raj bhai ji , Hacking queen ,lovetherisk, D2 and rest of TEAM INDISHELL
51 | 
52 | --==[[Love to]]==--
53 | 
54 | My Father ,my Ex Teacher,cold fire hacker,Mannu, ViKi ,Ashu bhai ji,Soldier Of God, Bhuppi,Gujjar PCP,rafay baloch
55 | Mohit,Ffe,Ashish,Shardhanand,Budhaoo,Jagriti,Salty, Hacker fantastic, Jennifer Arcuri and Don(Deepika kaushik)
56 | 


--------------------------------------------------------------------------------
/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: '2.1'
 2 | 
 3 | services:
 4 |   web:
 5 |     image: sqlite-lab
 6 |     hostname: sqliteweb
 7 |     build:
 8 |       context: .
 9 |     ports:
10 |       - "8080:80"
11 | 


--------------------------------------------------------------------------------
/head.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | 
  4 | $head = '
  5 | <html>
  6 | <head>
  7 | <link href="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTLfLXmLeMSTt0jOXREfgvdp8IYWnE9_t49PpAiJNvwHTqnKkL4" rel="icon" type="image/x-icon"/>
  8 | </script>
  9 | <title>--==[[IndiShell Lab]]==--</title>
 10 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
 11 | <STYLE>
 12 | body {
 13 | 	background: url(images/head.jpg);
 14 | 	background-size: 100% 700px;
 15 |     background-repeat: no-repeat;
 16 | font-family: Tahoma;
 17 | color: white;
 18 | 
 19 | }
 20 | .side-pan {
 21 |    margin: 0;
 22 |    border:0px;
 23 |    
 24 |    width:200px;
 25 |    padding: 5px 23px;
 26 |    margin:0px;
 27 |    -webkit-border-radius: 0px;
 28 |    -moz-border-radius: 0px;
 29 |    border-radius: 0px;
 30 |    border-bottom: 1px solid black;
 31 |    color: white;
 32 |    font-size: 20px;
 33 |    font-family: Georgia, serif;
 34 |    text-decoration: none;
 35 |    vertical-align: left;
 36 |    align:left;
 37 |    }
 38 |    div#left {
 39 |     width: 100%;
 40 |     height: 50px;
 41 |     float: left;
 42 | 	}
 43 | div#right {
 44 |     margin-left: 20%;
 45 |     height: 50px;
 46 | 	color: white;
 47 |     font-size: 20px;
 48 |     font-family: Georgia, serif;
 49 | 	}
 50 | .main div {
 51 |   float: left;
 52 |   clear: none; 
 53 | 	}
 54 | 
 55 | input {
 56 | border			: solid 2px ;
 57 | border-color		: black;
 58 | BACKGROUND-COLOR: #444444;
 59 | font: 8pt Verdana;
 60 | color: white;
 61 | }
 62 | submit {
 63 | BORDER:  buttonhighlight 2px outset;
 64 | BACKGROUND-COLOR: Black;
 65 | width: 30%;
 66 | color: #FFF;
 67 | }
 68 | #t input[type=\'submit\']{
 69 | 	COLOR: White;
 70 | 	border:none;
 71 | 	BACKGROUND-COLOR: black;
 72 | }
 73 | #t input[type=\'submit\']:hover {
 74 | 	
 75 | 	BACKGROUND-COLOR: #ff9933;
 76 | 	color: black;
 77 | 	
 78 | }
 79 | tr {
 80 | BORDER: dashed 1px #333;
 81 | color: #FFF;
 82 | }
 83 | td {
 84 | BORDER: dashed 0px ;
 85 | }
 86 | .table1 {
 87 | BORDER: 0px Black;
 88 | BACKGROUND-COLOR: Black;
 89 | color: #FFF;
 90 | }
 91 | .td1 {
 92 | BORDER: 0px;
 93 | BORDER-COLOR: #333333;
 94 | font: 7pt Verdana;
 95 | color: Green;
 96 | }
 97 | .tr1 {
 98 | BORDER: 0px;
 99 | BORDER-COLOR: #333333;
100 | color: #FFF;
101 | }
102 | table {
103 | BORDER: dashed 2px #333;
104 | BORDER-COLOR: #333333;
105 | BACKGROUND-COLOR: #191919;;
106 | color: #FFF;
107 | }
108 | textarea {
109 | border			: dashed 2px #333;
110 | BACKGROUND-COLOR: Black;
111 | font: Fixedsys bold;
112 | color: #999;
113 | }
114 | A:link {
115 | border: 1px;
116 | 	COLOR: red; TEXT-DECORATION: none
117 | }
118 | A:visited {
119 | 	COLOR: red; TEXT-DECORATION: none
120 | }
121 | A:hover {
122 | 	color: White; TEXT-DECORATION: none
123 | }
124 | A:active {
125 | 	color: white; TEXT-DECORATION: none
126 | }
127 | </STYLE>
128 | <script type="text/javascript">
129 | <!--
130 |     function lhook(id) {
131 |        var e = document.getElementById(id);
132 |        if(e.style.display == \'block\')
133 |           e.style.display = \'none\';
134 |        else
135 |           e.style.display = \'block\';
136 |     }
137 | //-->
138 | </script>
139 | '; 
140 | 
141 | echo $head ;
142 | 
143 | echo '
144 | <table width="100%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.7;border:0px;" >
145 | 			
146 |        <td width="100%" align=center valign="top" rowspan="1">
147 | 	   <font color=#ff9933 size="-2"> 
148 |         ##########################################</font><font color=white size="-2">#############################################</font><font color=green size="-2">#############################################</font><br>
149 |            <font color=#ff9933 size=5 face="comic sans ms"><b>--==[[ SQLite database</font><font color=white size=5 face="comic sans ms"><b> Powered SQL  </font><font color=green size=5 face="comic sans ms"><b> Injection Lab]]==--</font><br>
150 | 		   <font color=#ff9933 size=5 face="comic sans ms"><b>--==[[ </font><font color=white size=5 face="comic sans ms"><b>With Love From Team IndiShell </font><font color=green size=5 face="comic sans ms"><b>]]==--</font>
151 | 		   <div class="hedr"> 
152 |         <td height="10" align="left" class="td1"></td></tr><tr><td 
153 |         width="100%" align="center" valign="top" rowspan="1">
154 | 		<font color=#ff9933 size="-2"> 
155 |         ##########################################</font><font color=white size="-2">#############################################</font><font color=green size="-2">#############################################</font><br>
156 | 		<font 
157 |         color="red" face="comic sans ms"size="1">
158 |         
159 | 						
160 |           
161 |        </table> 
162 | '; 
163 | ?>


--------------------------------------------------------------------------------
/ica-lab.db:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/ica-lab.db


--------------------------------------------------------------------------------
/images/head.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/images/head.jpg


--------------------------------------------------------------------------------
/images/who.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/images/who.jpg


--------------------------------------------------------------------------------
/index.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | include('head.php');
  3 | 
  4 | 
  5 |    class DB extends SQLite3
  6 |    {
  7 |       function __construct()
  8 |       {
  9 |          $this->open('ica-lab.db');
 10 |       }
 11 |    }
 12 |    $db = new DB();
 13 |    if(!$db){
 14 |       echo $db->lastErrorMsg();
 15 |    } 
 16 | 
 17 | function is_array_empty($arr){
 18 |   if(is_array($arr)){     
 19 |       foreach($arr as $key => $value){
 20 |           if(!empty($value) || $value != NULL || $value != ""){
 21 |               return true;
 22 |               break;
 23 |           }
 24 |       }
 25 |       return false;
 26 |   }
 27 | }
 28 |   
 29 | echo '';
 30 | 		echo '<div id="left"><div class="main"><table align=center  cellspacing="0" cellpadding="0" style="border-collapse: collapse;border:0px;">
 31 | 		<tr>
 32 | 		<form method=post action="index.php">
 33 | 		<td align=right style="padding:0px; border:0px; margin:0px;">
 34 | 				<input type=submit name=home value="Home" class="side-pan">
 35 | 		</td>
 36 | 		<td  align=right style="padding:0px; border:0px; margin:0px;" >
 37 | 				<input type=submit name=plans value="Hosting Plans" class="side-pan">
 38 | 		</td>
 39 | 		<td  align=left style="padding:0px; border-width:0px; margin:0px;">
 40 | 				<input type=submit name=box value="Search Plans" class="side-pan">
 41 | 		</td>
 42 | 		<td  align=left style="padding:0px; border-width:0px; margin:0px;">
 43 | 				<input type=submit name=us value="Who we are" class="side-pan">
 44 | 		</td>
 45 | 				</form></tr></table></div></div>
 46 | 				<div id="right"></div><div align=center>';	
 47 | 	
 48 | 
 49 | if(isset($_POST['us']))
 50 | 	{
 51 | 		echo '
 52 | <table width="100%" cellspacing="0" cellpadding="0" class="tb1" style=" border:0px;background-color: #191919; opacity: 0.6;" >
 53 | 			
 54 |        <tr><td 
 55 |         align="center"><img src="images/who.jpg"></td><td 
 56 |          align="center" valign="top" rowspan="1"><font 
 57 |         color="red" face="comic sans ms"size="1"><br><font color=white >
 58 |         --==[[Greetz to]]==--</font><br> <font color=#ff9933>Guru ji zero ,code breaker ica, root_devil, google_warrior,INX_r0ot,Darkwolf indishell,Baba ,Silent poison India,Magnum sniper,ethicalnoob Indishell,Local root indishell,Irfninja indishell<br>Reborn India,L0rd Crus4d3r,cool toad,Hackuin,Alicks,Gujjar PCP,Bikash,Dinelson Amine,Th3 D3str0yer,SKSking,rad paul,Godzila,mike waals,zoo zoo,cyber warrior,shafoon, Rehan manzoor<br>cyber gladiator,7he Cre4t0r,Cyber Ace, Golden boy INDIA,Ketan Singh,Yash,Aneesh Dogra,AR AR,saad abbasi,hero,Minhal Mehdi ,Raj bhai ji , Hacking queen ,lovetherisk, D2 and rest of TEAM INDISHELL<br>
 59 | <font color=white>--==[[Love to]]==--</font><br># My Father ,my Ex Teacher,cold fire hacker,Mannu, ViKi ,Ashu bhai ji,Soldier Of God, Bhuppi,Gujjar PCP,
 60 | Mohit,Ffe,Ashish,Shardhanand,Budhaoo,Jagriti,Salty, Hacker fantastic, Jennifer Arcuri and Don(Deepika kaushik),Govind<br><br>
 61 | 
 62 |        
 63 | 						
 64 |            </table>
 65 |        </table> 
 66 | '; 
 67 | 
 68 | 	}	
 69 | 				
 70 | if(isset($_POST['box'])) 
 71 | {
 72 | 	echo '<table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="border: 0px; background-color: transparent; ">
 73 | 		   <tr><td width="40%" align=center style="padding: 10px; background-color: #191919; opacity: 0.6;">
 74 | 		   Hi, you can search your hosting plan according to following Tags <br>
 75 | 		  <font color=#ff9933 > ubuntu,redhat,kali and windows</h4></td></tr><tr>
 76 | 		  <td width="40%" align=center style="padding: 10px;">
 77 | 		   <form method=post action="index.php" style="margin:10px;">
 78 | 		   <input type=text name=tag style="padding: 5px;" value="ubuntu,windows etc..">
 79 | 		   <br><br>
 80 | 		   <input type=submit name=search value="Check Plan"></form>
 81 | 			</td></tr></table>
 82 | 		';
 83 | }		
 84 | 
 85 | if(isset($_POST['search']))
 86 | 	{
 87 | 		$sql = "SELECT * from info where Tag = '".trim($_POST['tag'])."';";
 88 | 			$output = $db->query($sql);
 89 | 			$row = $output->fetchArray(SQLITE3_ASSOC);
 90 | 			
 91 | 				if(is_array_empty($row))
 92 | 				{
 93 | 					echo '<table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.8;">
 94 | 						   <tr><td width="30%" align=left style="padding: 10px;" >Dear, you plan is available:) <br> Please write a mail to us <font color=#ff9933 size=4>order@pirate-host.local</font> with your requirements.</td></tr></table>';
 95 | 				}
 96 | 				else 
 97 | 				{
 98 | 				echo '<table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.8;">
 99 | 						   <tr><td width="30%" align=left style="padding: 10px;" >sorry, but your plan is not available. Shot mail to e-mail <font color=#ff9933 size=4>support@pirate-host.local</font></td></tr></table>';	
100 | 				}
101 | 	}
102 | 		
103 | if(isset($_POST['plans'])) 
104 | {
105 | 	$sql ="SELECT * from info;";
106 | 
107 | 
108 |    $output = $db->query($sql);
109 |    echo '
110 |    <table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.8;">
111 |    <tr><td width="30%" align=center style="padding: 10px;" >Serial Number</td><td width="40%" align=center style="padding: 10px;">Operating system</td><td width="30%" align=center style="padding: 10px;">Price</td></tr></table>
112 |    <table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="margin:10px 2px 10px;opacity: 0.8;" ><tr>
113 |    '; 
114 |    while($row = $output->fetchArray(SQLITE3_ASSOC) )
115 | 		{
116 | 				echo '<td width="30%" align=center  style="padding: 5px;"><a href="?snumber='. $row['number'] . '">'. $row['number'] . '</a></td><td width="40%" align=center  style="padding: 5px;"><a href="?tag='. $row['Tag'] .'">'. $row['OS'] .'</a></td><td width="30%" align=center  style="padding: 5px;">'. $row['Price'] .'</td></tr>';
117 |       	}
118 |     $db->close();
119 | } 
120 | 
121 | if(isset($_GET['snumber'])) 
122 | 		{
123 | 			$sql = "SELECT * from info where number = ".trim($_GET['snumber']).";";
124 | 			$output = $db->query($sql);
125 | 			$row = $output->fetchArray(SQLITE3_ASSOC);
126 | 				if(is_array_empty($row))
127 | 					{
128 | 						//print_r($all);
129 | 						echo '<div align=center>
130 | 						   <table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.8;">
131 | 						   <tr><td width="30%" align=left style="padding: 10px;" >Hi, deatils for the selected hosting plan is following, Hopefully you will find it suitable for your requirement :) <br><div align=right>-Pirate Host-</div></td></tr></table>
132 | 						   <table width="30%" cellspacing="0" cellpadding="0" class="tb1" style="margin:10px 2px 10px;opacity: 0.8;" ><tr>'; 
133 | 								
134 | 									echo '<td width="60%" align=center  style="padding: 5px;">Default Operating system</td><td width="40%" align=left style="padding: 5px;color:#ff9933;">'. $row['OS'] .'</td></tr><tr><td width="60%" align=center  style="padding: 5px;">Monthly payment (in $)</td><td width="30%" align=left  style="padding: 5px; color:#ff9933;">'. $row['Price'] .'</td></tr><tr><td width="60%" align=center  style="padding: 5px;"> Assigned IP </td><td width="40%" align=left  style="padding: 5px; color:#ff9933;">'.$row['Server_IP'].' </td>';
135 | 								
136 | 					}
137 | 					else {
138 | 						echo "serial number doesn't exist :) please try correct one";
139 | 					}
140 |     $db->close();
141 | 		}
142 | 
143 | 	
144 | if(isset($_GET['tag'])) 
145 | 		{
146 | 			$sql = "SELECT * from info where Tag = '".trim($_GET['tag'])."';";
147 | 			$output = $db->query($sql);
148 | 			$row = $output->fetchArray(SQLITE3_ASSOC);
149 | 				if(is_array_empty($row))
150 | 					{
151 | 						echo '<div align=center>
152 | 						   <table width="50%" cellspacing="0" cellpadding="0" class="tb1" style="opacity: 0.8;">
153 | 						   <tr><td width="30%" align=left style="padding: 10px;" >Hi, deatils for the selected hosting plan Tag is following, Hopefully you will find it suitable for your requirement :) <br><div align=right>-Pirate Host-</div></td></tr></table>
154 | 						   <table width="30%" cellspacing="0" cellpadding="0" class="tb1" style="margin:10px 2px 10px;opacity: 0.8;" ><tr>'; 
155 | 								
156 | 									echo '<td width="60%" align=center  style="padding: 5px;">Default Operating system</td><td width="40%" align=left style="padding: 5px;color:#ff9933;">'. $row['OS'] .'</td></tr><tr><td width="60%" align=center  style="padding: 5px;">Monthly payment (in $)</td><td width="30%" align=left  style="padding: 5px; color:#ff9933;">'. $row['Price'] .'</td></tr><tr><td width="60%" align=center  style="padding: 5px;"> Assigned IP </td><td width="40%" align=left  style="padding: 5px; color:#ff9933;">'.$row['Server_IP'].' </td>';
157 | 					}
158 | 					else {
159 | 						echo "sorry, seems Tag name is inconnect. Please try again with available Tag :) ";
160 | 					}
161 |     $db->close();
162 | 		}	
163 |  echo "<font size=5 face=\"comic sans ms\" style=\"left: 0;bottom: 0; position: absolute;margin: 0px 0px 5px;\">Welcome to <font color=#ff9933>Pirate H0st</font>. we provide affordable hosting servers ";
164 | ?>
165 | 


--------------------------------------------------------------------------------
/sqlite lab 2.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/sqlite lab 2.png


--------------------------------------------------------------------------------
/sqlite lab 3.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/sqlite lab 3.png


--------------------------------------------------------------------------------
/sqlite lab 4.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/sqlite lab 4.png


--------------------------------------------------------------------------------
/sqlite lab.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/incredibleindishell/sqlite-lab/72ca2c842dc8c50c09974056f6964d0de2ec55b5/sqlite lab.png


--------------------------------------------------------------------------------