utility / Red
SQL Injection Cheat Sheet
Reference for SQL injection payloads across MySQL, PostgreSQL, MSSQL, and Oracle.
Runs locally
LOCAL WORKBENCH
SQL Injection Syntax Reference Matrix
100% Local
| Database | Version Query | Comment | String Concat |
|---|---|---|---|
| MySQL | SELECT @@version | -- | CONCAT(a,b) |
| PostgreSQL | SELECT version() | -- | a || b |
| Microsoft SQL Server | SELECT @@VERSION | -- | a + b |
| SQLite | SELECT sqlite_version() | -- | a || b |
Continue the thread