---
description: Online and Offline Labs for Blind SQLi
---

# Labs

## Online:

{% embed url="https://portswigger.net/web-security/sql-injection/blind/lab-conditional-responses" %}

{% embed url="https://portswigger.net/web-security/sql-injection/blind/lab-conditional-errors" %}

{% embed url="https://portswigger.net/web-security/sql-injection/blind/lab-time-delays" %}

{% embed url="https://portswigger.net/web-security/sql-injection/blind/lab-time-delays-info-retrieval" %}

{% embed url="https://portswigger.net/web-security/sql-injection/blind/lab-out-of-band-data-exfiltration" %}



## Offline:&#x20;

{% embed url="https://github.com/sqlmapproject/testenv" %}

### DVWA&#x20;

* SQL Injection (Blind)&#x20;

{% embed url="https://www.youtube.com/watch?v=fQezCmvSQq4&ab_channel=BubbahSmith" %}

### bWapp

* SQL Injection - Blind - Time-Based
* SQL Injection - Blind - Time-Base
* SQL Injection - Blind (SQLite)&#x20;
* SQL Injection - Blind (Web Services/SOAP)&#x20;

{% embed url="https://www.youtube.com/watch?v=4LM_EIehbsU&ab_channel=MacedonianSecurityCrew" %}

