> For the complete documentation index, see [llms.txt](https://www.xtormin.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.xtormin.com/labs.md).

# Labs

- [Offensive Security Labs](https://www.xtormin.com/labs/offensive-security-labs.md)
- [Proving Grounds Practice](https://www.xtormin.com/labs/offensive-security-labs/proving-grounds-practice.md)
- [Nickel](https://www.xtormin.com/labs/offensive-security-labs/proving-grounds-practice/nickel.md)
- [Slort](https://www.xtormin.com/labs/offensive-security-labs/proving-grounds-practice/slort.md)
- [Jacko](https://www.xtormin.com/labs/offensive-security-labs/proving-grounds-practice/jacko.md)
- [Hack The Box / HTB](https://www.xtormin.com/labs/hack-the-box-htb.md)
- [PortSwigger Academy](https://www.xtormin.com/labs/portswigger-academy.md)
- [SQL Injection](https://www.xtormin.com/labs/portswigger-academy/sql-injection.md)
- [Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-vulnerability-in-where-clause-allowing-retrieval-of-hidden-data.md): Vulnerabilidad de inyección SQL en la cláusula WHERE que permite la extracción de datos ocultos.
- [Lab: SQL injection vulnerability allowing login bypass](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-vulnerability-allowing-login-bypass.md): Vulnerabilidad de inyección SQL que permite eludir el inicio de sesión.
- [Lab: SQL injection UNION attack, determining the number of columns returned by the query](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-determining-the-number-of-columns-returned-by-the-query.md): Ataque de inyección SQL mediante UNION, determinando el número de columnas que devuelve la consulta.
- [Lab: SQL injection UNION attack, finding a column containing text](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-finding-a-column-containing-text.md): Ataque de inyección SQL mediante UNION, identificando una columna que contenga texto.
- [Lab: SQL injection UNION attack, retrieving data from other tables](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-retrieving-data-from-other-tables.md): Ataque de inyección SQL mediante UNION, extrayendo datos de otras tablas.
- [Lab: SQL injection UNION attack, retrieving multiple values in a single column](https://www.xtormin.com/labs/portswigger-academy/sql-injection/lab-sql-injection-union-attack-retrieving-multiple-values-in-a-single-column.md): Ataque de inyección SQL mediante UNION, extrayendo múltiples valores en una sola columna.