<!DOCTYPE html>
<html>
<head>
        <link href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
    </head>
    <body>
        <div class="container-fluid">
            <h1 class="text-center">Can you finish all these SQL injection challenges?</h1>
        </div>

        <br>
        <br>
        <br>
        <br>

        <!-- Challenge #1 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 1</h3>
              </div>
              <div class="panel-body">
                My friend created a website where we can store secrets... Unfortunately, we can only see our own.
                Help me find all of my friend's secrets.
              </div>
              <div class="panel-footer">
    <a href="/level1.php" target="_blank" class="btn btn-success">Start here</a>
    <a href="/level1.php?source" target="_blank" class="btn btn-primary">Source code</a>

    </div>
            </div>
        </div>

        <!-- Challenge #2 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 2</h3>
              </div>
              <div class="panel-body">
                I think an administrator blocked my account. Can you help me steal someone else's account?
    <br/>
    <br/>
    <strong>Note</strong>: There are <u>two</u> flags in this challenge.
              </div>
              <div class="panel-footer">
    <a href="/level2.php" target="_blank" class="btn btn-warning">Start here</a>
    <a href="/level2.php?source" target="_blank" class="btn btn-primary">Source code</a>
    </div>
            </div>
        </div>

        <!-- Challenge #3 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 3 - The Blacklist Saga (Part 1)</h3>
              </div>
              <div class="panel-body">
                Time for bug bounties! This multinational technology company has been hacked so many times, we might be able
                find a new bug and make some money out of it...
              </div>
         <div class="panel-footer">
    <a href="/level3.php" target="_blank" class="btn btn-warning">Start here</a>
    <a href="/level3.php?source" target="_blank" class="btn btn-primary">Source code</a>
    </div>
            </div>
        </div>

        <!-- Challenge #4 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 4 - The Blacklist Saga (Part 2)</h3>
              </div>
              <div class="panel-body">
                Seems like our previous bug has been patched now... Let's double check that they did their job properly.
              </div>
       <div class="panel-footer">
    <a href="/level4.php" target="_blank" class="btn btn-warning">Start here</a>
    <a href="/level4.php?source" target="_blank" class="btn btn-primary">Source code</a>
    </div>

            </div>
        </div>

        <!-- Challenge #5 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 5 - The Blacklist Saga (Part 3)</h3>
              </div>
              <div class="panel-body">
                These developers are sloppy... They claim that their website is secure now (for the second time),
                I hope they are right this time...
              </div>
       <div class="panel-footer">
    <a href="/level5.php" target="_blank" class="btn btn-warning">Start here</a>
    <a href="/level5.php?source" target="_blank" class="btn btn-primary">Source code</a>
    </div>

            </div>
        </div>

        <!-- Challenge #6 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 6 - The Blacklist Saga (Part 4)</h3>
              </div>
              <div class="panel-body">
                I'm starting to believe that these developers are complete idiots. They just claimed that
                blacklisting single-quotes and double-quotes solve every SQL injection issue.
                <br>
                <br>
                Let's prove them wrong.
              </div>
       <div class="panel-footer">
    <a href="/level6.php" target="_blank" class="btn btn-danger">Start here</a>
    <a href="/level6.php?source" target="_blank" class="btn btn-primary">Source code</a>
    </div>
            </div>
        </div>

        <!-- Challenge #7 -->
        <div class="container-fluid">
            <div class="panel panel-default">
              <div class="panel-heading">
                <h3 class="panel-title">Level 7</h3>
              </div>
              <div class="panel-body">
                My teacher has this weird website. I doubt there's any useful information
                in the database. Maybe we can leak the /etc/passwd file instead?
              </div>
              <div class="panel-footer"><a href="/level7.php" target="_blank" class="btn btn-danger">Start here</a></div>
            </div>
        </div>
  <script
              src="https://code.jquery.com/jquery-3.1.1.min.js"
              integrity="sha256-hVVnYaiADRTO2PzUGmuLJr8BLUSjGIZsDYGmIJLv2b8="
              crossorigin="anonymous"></script>
        <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>

</body>
</html>
