🛡️ SQL Injection Payload Collection
📚 Educational • Defensive Security • Authorized Testing Only
Created & Maintained by Alex Livnso
---👋 Welcome
This repository contains a collection of publicly known SQL Injection (SQLi) payloads for learning, research, Capture The Flag (CTF) challenges, intentionally vulnerable labs, and authorized security assessments.
The goal is to help cybersecurity learners understand how SQL Injection is identified so developers and security professionals can better defend against it.
📌 What's Inside
- 🔹 Basic SQL syntax test payloads
- 🔹 Quote testing payloads
- 🔹 Boolean-based examples
- 🔹 UNION SELECT examples
- 🔹 ORDER BY & GROUP BY examples
- 🔹 Time-based detection examples
- 🔹 Database fingerprinting samples
- 🔹 Encoded payload examples
- 🔹 Polyglot payloads
- 🔹 WAF bypass syntax examples (for defensive research)
💡 What is SQL Injection?
SQL Injection (SQLi) is a web security vulnerability that can occur when an application does not safely process user input before sending it to a database.
Learning about SQL Injection helps developers build secure applications and helps security testers identify and report vulnerabilities before they can be abused.
🧰 Burp Suite
Burp Suite is a professional web application security testing platform developed by PortSwigger.
It is commonly used during authorized penetration testing to inspect, analyze, and modify HTTP/HTTPS traffic between a browser and a web application.
Features
- 🌐 HTTP/HTTPS Proxy
- 📨 Request & Response Inspection
- 🔁 Repeater
- 🔍 Target Mapping
- 📊 Logger
- 🧪 Manual Security Testing
- 🛠️ Extension Support
🚀 Getting Started with Burp Suite
- Download Burp Suite
Official Website
Download Page
https://portswigger.net/burp/releases
Documentation
https://portswigger.net/burp/documentation
- Install
Windows
- Download the installer.
- Run the setup.
- Finish installation.
- Launch Burp Suite.
Linux
- Download the Linux installer.
- Make it executable.
- Run the installer.
- Complete setup.
macOS
- Download the installer.
- Open the package.
- Finish installation.
- Launch Burp Suite.
-
Basic Workflow
-
Start Burp Suite.
-
Configure your browser to send traffic through Burp's proxy.
-
Browse an application that you own or are explicitly authorized to test.
-
Inspect requests and responses.
-
Analyze how the application handles user input.
-
Document findings and report vulnerabilities responsibly.
🎯 Intended Audience
- Cybersecurity Students
- Ethical Hackers
- Security Researchers
- Bug Bounty Learners
- Penetration Testers
- CTF Players
- Developers Learning Secure Coding
This repository is provided strictly for educational, defensive, and authorized security testing purposes.
Do not use these payloads against systems without explicit permission. The author does not endorse unauthorized access or misuse of this material.
Users are solely responsible for complying with applicable laws, organizational policies, and ethical guidelines.
🤝 Contributions
Pull Requests, improvements, documentation updates, and educational additions are welcome.
If you discover an issue or have suggestions, feel free to open an Issue or submit a Pull Request.
⭐ Credits
👨💻 Alex Livnso
Thank you for supporting cybersecurity education, responsible disclosure, and secure software development.
⭐ If this project helped you learn something new, consider giving it a star!
Made with ❤️ by Alex Livnso