SQL Heist Turns Injection Practice Into a Noir Break-In

Why it surfaced

Each case follows five moves—brief, recon, exploit, loot, debrief—and displays the live query your input builds. The site pairs attack practice with defensive code, while keeping every run inside a freshly seeded browser sandbox with no network target.

An in-browser game teaches SQL injection through three sandboxed SQLite cases, then shows the defensive fix.