About

SQL Injection Lab is an educational tool for understanding SQL injection attacks hands-on, in a safe environment.

Our mission

The goal of this project is to teach developers and students how SQL injection attacks work — so they can write safer code. The best way to defend against an attack is to understand it.

How it works

Every task runs against a real SQLite database executed directly in your browser via WebAssembly. Your injections genuinely execute, but everything happens locally and in isolation — no real systems are ever at risk.

Safety and ethics

This tool is intended solely for educational purposes. Never use the techniques you learn here against systems without explicit authorization. Unauthorized access to computer systems is a crime.

About the author

The project started as a school project at FIIT STU (BVI) and is further developed by kromka.it.