-
-
Notifications
You must be signed in to change notification settings - Fork 59
Open
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthacktoberfest-acceptedhelp wantedExtra attention is neededExtra attention is neededpriority
Description
Summary
Add a new, safe and isolated learning lab to teach beginners about SQL Injection concepts, detection, and mitigation — without providing exploit payloads or instructions for attacking live systems. The lab will be runnable locally (Docker) and include exercises, a small demo app that illustrates vulnerable patterns (non-executable examples), a safe implementation, a local progress tracker, and short trivia links as rewards.
Why
- Makes the repository more beginner-friendly and practical.
- Encourages learning defensive techniques instead of enabling attacks.
- Great Hacktoberfest contribution that’s easy to review and merge.
Acceptance criteria / checklist
- sql-injection-lab/README.md added with quick start and safety notice.
- Dockerfile + docker-compose that runs the lab locally and isolated.
- app/vulnerable_app.py and app/safe_app.py present; vulnerable file uses only illustrative pseudocode/commented examples (no exploit execution).
- Exercises written (conceptual, non-actionable) with links to OWASP / PortSwigger for further reading.
- Local JSON tracker and trivia reward system implemented (no server required).
- Smoke tests pass: container boots and endpoints respond OK.
- CONTRIBUTING / LICENSE_NOTE updated to include ethics & usage constraint
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requestgood first issueGood for newcomersGood for newcomershacktoberfesthacktoberfest-acceptedhelp wantedExtra attention is neededExtra attention is neededpriority