cspshivam/playground
SQLi Level 5 / 6 Hard
← All labs

Timing Inference

No body change, no error — only latency. Read the database purely by how long each response takes.

Async price refresh

Queues a background price refresh for the selected product. Always returns the same acknowledgement.

Refresh price for product #1

The injectable value is pinned by the page — tamper it with an intercepting proxy.

Recovered the admin's password by timing? Verify it here.

This is an isolated, intentionally-vulnerable sandbox. Data here is fake and scoped to you. The rest of CSPSHIVAM Playground is not part of the target.