~ / cases / sqli

⌗ SQL Injection

Classic and second-order injection — the bug class that never dies, even in modern stacks.

[docker lab] query-playground

Explore injection safely against an isolated training database. Run it locally to practice the proof of concept in an isolated environment.

docker compose -f labs/sqli up --build

aurora@hack:~$ ls ./cases/sqli

▲ Critical12 min read

RAG Debug Response to Cross-Tenant SQL Injection

A RAG assistant exposed generated SQL and database results in a debug response body, allowing iterative schema discovery and cross-tenant credential extraction.

#sqli#rag#debug#multi-tenant#ai-agent

other classes: arbitrary-file-read · rce · prompt-injection-role-confusion · system-prompt-exfiltration