SQL Injection

Cross-platform resources for SQL Injection: curated HTB machines, PortSwigger labs and TryHackMe rooms with validated writeups and related skills.

This page aggregates cross-platform resources to practice SQL Injection: retired Hack The Box machines, PortSwigger Web Security Academy labs and TryHackMe rooms, plus curated resources (HackTricks, PortSwigger, etc.) and related skills.

Coverage: 78 challenges across 3 platforms — 36 HackTheBox · 22 PortSwigger · 20 TryHackMe. 36 with a Spanish writeup, 36 with a video writeup.

Where to start

Ordered by actual difficulty. At the same level: isolated lab first, then the guided room, and the full machine last.

1. PortSwigger — Detecting NoSQL injection (Apprentice) · 🇬🇧
2. PortSwigger — Exploiting NoSQL operator injection to bypass authentication (Apprentice) · 🇬🇧
3. PortSwigger — SQL injection vulnerability allowing login bypass (Apprentice) · 🇬🇧
4. PortSwigger — SQL injection vulnerability in WHERE clause allowing retrieval of hidden data (Apprentice) · 🇬🇧
5. TryHackMe — 25 Days of Cyber Security (Easy · ~45 min) · 🇬🇧
6. TryHackMe — Advent of Cyber 2 [2020] (Easy · ~45 min) · 🇬🇧

Curated resources

Source	Link
HackTricks	https://book.hacktricks.wiki/en/pentesting-web/sql-injection/index.html
PortSwigger	https://portswigger.net/web-security/sql-injection

HTB machines practicing SQL Injection (36)

Machine	OS	Difficulty	Writeup
Altered	Linux	HARD	🇪🇸 🇬🇧 📹
Bankrobber	Windows	INSANE	🇪🇸 🇬🇧 📹
Bastard	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Breadcrumbs	Windows	HARD	🇪🇸 🇬🇧 📹
Cache	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Cascade	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Catch	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Charon	Linux	HARD	🇪🇸 🇬🇧 📹
Control	Windows	HARD	🇪🇸 🇬🇧 📹
Cronos	Linux	MEDIUM	🇪🇸 🇬🇧 📹
EarlyAccess	Linux	HARD	🇪🇸 🇬🇧 📹
Enterprise	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Europa	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Falafel	Linux	HARD	🇪🇸 🇬🇧 📹
Fighter	Windows	INSANE	🇪🇸 🇬🇧 📹
Flujab	Linux	HARD	🇪🇸 🇬🇧 📹
Giddy	Windows	MEDIUM	🇪🇸 🇬🇧 📹
GoodGames	Linux	EASY	🇪🇸 🇬🇧 📹
Holiday	Linux	HARD	🇪🇸 🇬🇧 📹
Mango	Linux	MEDIUM	🇪🇸 🇬🇧 📹
MultiMaster	Windows	INSANE	🇪🇸 🇬🇧 📹
Nightmare	Linux	INSANE	🇪🇸 🇬🇧 📹
NodeBlog	Linux	EASY	🇪🇸 🇬🇧 📹
Overflow	Linux	HARD	🇪🇸 🇬🇧 📹
OverGraph	Linux	HARD	🇪🇸 🇬🇧 📹
Oz	Linux	HARD	🇪🇸 🇬🇧 📹
Pandora	Linux	EASY	🇪🇸 🇬🇧 📹
Phoenix	Linux	HARD	🇪🇸 🇬🇧 📹
Scavenger	Linux	HARD	🇪🇸 🇬🇧 📹
SecNotes	Windows	MEDIUM	🇪🇸 🇬🇧 📹
StreamIO	Windows	MEDIUM	🇪🇸 🇬🇧 📹
Toolbox	Windows	EASY	🇪🇸 🇬🇧 📹
Union	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Validation	Linux	EASY	🇪🇸 🇬🇧 📹
Writer	Linux	MEDIUM	🇪🇸 🇬🇧 📹
Zetta	Linux	HARD	🇪🇸 🇬🇧 📹

PortSwigger labs practicing SQL Injection (22)

Lab	Difficulty	Topic	Official
Detecting NoSQL injection	APPRENTICE	NoSQL Injection	Open
Exploiting NoSQL operator injection to bypass authentication	APPRENTICE	NoSQL Injection	Open
SQL injection vulnerability allowing login bypass	APPRENTICE	SQL Injection	Open
SQL injection vulnerability in WHERE clause allowing retrieval of hidden data	APPRENTICE	SQL Injection	Open
Blind SQL injection with conditional errors	PRACTITIONER	SQL Injection	Open
Blind SQL injection with conditional responses	PRACTITIONER	SQL Injection	Open
Blind SQL injection with out-of-band data exfiltration	PRACTITIONER	SQL Injection	Open
Blind SQL injection with out-of-band interaction	PRACTITIONER	SQL Injection	Open
Blind SQL injection with time delays	PRACTITIONER	SQL Injection	Open
Blind SQL injection with time delays and information retrieval	PRACTITIONER	SQL Injection	Open
Exploiting NoSQL injection to extract data	PRACTITIONER	NoSQL Injection	Open
Exploiting NoSQL operator injection to extract unknown fields	PRACTITIONER	NoSQL Injection	Open
SQL injection attack, listing the database contents on non-Oracle databases	PRACTITIONER	SQL Injection	Open
SQL injection attack, listing the database contents on Oracle	PRACTITIONER	SQL Injection	Open
SQL injection attack, querying the database type and version on MySQL and Microsoft	PRACTITIONER	SQL Injection	Open
SQL injection attack, querying the database type and version on Oracle	PRACTITIONER	SQL Injection	Open
SQL injection UNION attack, determining the number of columns returned by the query	PRACTITIONER	SQL Injection	Open
SQL injection UNION attack, finding a column containing text	PRACTITIONER	SQL Injection	Open
SQL injection UNION attack, retrieving data from other tables	PRACTITIONER	SQL Injection	Open
SQL injection UNION attack, retrieving multiple values in a single column	PRACTITIONER	SQL Injection	Open
SQL injection with filter bypass via XML encoding	PRACTITIONER	SQL Injection	Open
Visible error-based SQL injection	PRACTITIONER	SQL Injection	Open

TryHackMe rooms practicing SQL Injection (20)

Room	Difficulty	Type	Access	Official
25 Days of Cyber Security	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 2 [2020]	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 2022	EASY	Walkthrough	🟢 Free	Open
Advent of Cyber 3 (2021)	EASY	Walkthrough	🟢 Free	Open
Avengers Blog	EASY	Walkthrough	🔵 VIP	Open
Custom Tooling Using Python	EASY	Walkthrough	🟢 Free	Open
NoSQL Injection	EASY	Walkthrough	🟢 Free	Open
OWASP Juice Shop	EASY	Walkthrough	🟢 Free	Open
Simple CTF	EASY	Challenge	🟢 Free	Open
SQLMap: The Basics	EASY	Walkthrough	🔵 VIP	Open
WAF: Introduction	EASY	Walkthrough	🟢 Free	Open
Advanced SQL Injection	MEDIUM	Walkthrough	🟢 Free	Open
CTF collection Vol.2	MEDIUM	Challenge	🟢 Free	Open
Prioritise	MEDIUM	Challenge	🟢 Free	Open
SQHell	MEDIUM	Challenge	🟢 Free	Open
SQL Injection	MEDIUM	Walkthrough	🟢 Free	Open
TryHack3M: Sch3Ma D3Mon	MEDIUM	Walkthrough	🟢 Free	Open
Wekor	MEDIUM	Challenge	🟢 Free	Open
Daily Bugle	HARD	Challenge	🔵 VIP	Open
Sequel Dump	HARD	Challenge	🔵 VIP	Open

Related skills

• /en/skills/rce
• /en/skills/xss

---

← Back to the full glossary

Last updated: 2026-08-17