The newest SQL Injection resources are on the SQL Injection page. For a reading order instead of a date order, see the SQL Injection learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-04-03 2026 | PayloadsAllTheThings - SQL Injection beginner 13 min read | Reference detailing SQL Injection (SQLi) techniques, including entry point detection, DBMS identification, authentication bypass using tautologies and UNION queries, blind injection, error-based and timing attacks, and specific vulnerabilities like those affecting PDO prepared statements and WAF bypasses. It features tools such as sqlmap and ghauri, and discusses the impact of password hashing and salts on modern authentication bypass methods. |
| 2026-04-02 2026 | New "LeakyLooker" Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries news 2 min read | Writeup detailing nine "LeakyLooker" vulnerabilities in Google Looker Studio, including cross-tenant unauthorized access, zero-click SQL injection on database connectors and stored credentials, SQL injection on BigQuery and Spanner through native functions and custom queries, data source leaks via hyperlinks and image rendering, XS leaks with timing oracles, and denial of wallet. These flaws could allow attackers to exfiltrate, insert, and delete data across various Google Cloud Platform services, impacting databases like BigQuery, Spanner, PostgreSQL, and MySQL. → thehackernews.com |
| 2025-08-14 2025 | NucleiFuzzer - Powerful Automation Tool For Detecting XSS, SQLi, SSRF, Open intermediate Fuzzing | "NucleiFuzzer is an automation tool designed for detecting vulnerabilities like XSS, SQLi, SSRF, and Open. It offers powerful capabilities for automated security testing." → kitploit.com |
| 2025-08-14 2025 | 👩💻IW Weekly #39: $10,000 Bounty, Zero-click Account Takeover, Stored XSS, Open Redirection Vulnerability, SQL… news 3 min read RCE XSS | Writeup detailing a $10,000 bounty for a Facebook Reels crop/trim feature flaw, Zoom stored XSS, Facebook zero-click account takeover, io_uring Use-After-Free (CVE-2022-2602), Apple subdomain open redirection, and GraphQL pentesting. It also covers insecure CORS configurations, bug bounty automation, smart contract vulnerabilities, HTTP Basic Auth, SQL injection to RCE (CVE-2022-44015), RFC analysis, CTF challenges, CodeQL for GraphQL, reconnaissance techniques, SSRF, and EVM chain vulnerability analysis. |
| 2025-08-14 2025 | yeswehack/vulnerable-code-snippets: Twitter vulnerable snippets beginner 2 min read SSRF XSS | Library of vulnerable code snippets for practicing application security analysis. This collection includes examples of Broken access control (CWE-284), SQL injection (CWE-89), Cross-Site Scripting (CWE-79), Server-Side Template Injection (CWE-1336), and many other common vulnerabilities, all runnable within an isolated Docker environment. New snippets are released weekly, and users can suggest additions via GitHub issues. |
| 2025-08-14 2025 | SQL Injection Wiki beginner | Library for identifying, exploiting, and escalating SQL injection vulnerabilities across various Database Management Systems. This comprehensive resource is structured to follow a typical escalation path, offering detailed information on techniques applicable to different versions of SQL databases. Contributions are welcomed via GitHub. |
| 2025-08-14 2025 | BSQLinjector - Blind SQL Injection Tool Download in Ruby - Darknet - Hacking Tools, Hacker News & Cyber Security intermediate | Tool written in Ruby for performing blind SQL injection. BSQLinjector identifies vulnerabilities by posing true/false questions to the database and analyzing application responses, a technique useful when generic error messages obscure traditional SQLi. Users can employ the `--test` switch to preview payloads before execution. This tool offers an alternative to automated solutions like sqlmap for blind SQL injection scenarios. |
| 2025-08-14 2025 | SQL Attack (Constraint-based) - Dhaval Kapil intermediate 4 min read | Library for exploiting SQL constraint-based vulnerabilities, similar to SQL injection but distinct. This technique leverages trailing whitespace trimming and `VARCHAR` length constraints in databases like MySQL and SQLite. An attacker can register a username with trailing spaces followed by a different character, tricking the application into inserting it and allowing them to authenticate as an existing user. Defense strategies include implementing `UNIQUE` constraints on relevant columns, using `id` as primary keys, and manually trimming input parameters. |
| 2025-08-14 2025 | SQL Injection Cheat Sheet by Netsparker beginner 18 min read | Library for SQL injection techniques, this cheat sheet details payloads and technical information for exploiting variants against MySQL, Microsoft SQL Server, Oracle, PostgreSQL, and SQLite. It covers UNION-based attacks, conditional statements like IF and CASE, hexadecimal encoding, and string manipulation methods to bypass filters. The resource also highlights the utility of Dynamic Application Security Testing (DAST) tools, such as Invicti and Acunetix, for automating the discovery and exploitation of SQL injection vulnerabilities. |
| 2025-08-14 2025 | Vulnerability analysis, Security Papers, Exploit Tutorials - Part 12975 beginner 36 min read | Library detailing MSSQL injection techniques, including basic SQL injection, blind SQL injection, and advanced methods utilizing extended stored procedures. It covers testing for vulnerabilities, bypassing authentication, evading audit logs, and includes a cheat sheet for MSSQL queries and countermeasures, as well as a Perl script for finding vulnerable sites. → exploit-db.com |
| 2025-08-14 2025 | SQL Injection Cheatsheet 2021 beginner 17 min read | Library containing SQL injection payloads and techniques, detailing in-band (Error-based, Union-based), inferential (Boolean-based, Time-based), and out-of-band methods. It includes best practices for prevention such as parameterized queries, input validation, stored procedures, least privilege, and WAFs, alongside specific payloads for authentication bypass and error-based extraction. |
| 2025-08-14 2025 | SQL injection time and boolean based intermediate | The content discusses SQL injection vulnerabilities, specifically focusing on time-based and boolean-based techniques. It explains how these methods can be exploited to manipulate database queries and extract sensitive information. The article likely provides examples, demonstrations, and insights on how to identify and mitigate SQL injection vulnerabilities in web applications. It is a valuable resource for bug bounty hunters, security researchers, and developers looking to enhance their understanding of SQL injection attacks. |
| 2025-08-14 2025 | Understanding the full potential of sqlmap during bug bounty hunting intermediate Bug Bounty | The content discusses maximizing the capabilities of SQLmap for bug bounty hunting. It covers understanding SQL injection vulnerabilities, using SQLmap to automate the process of exploiting these vulnerabilities, and tips for effective bug bounty hunting. The article emphasizes the importance of thorough testing and proper understanding of SQLmap's features to achieve successful results in identifying and exploiting vulnerabilities. It provides insights into leveraging SQLmap effectively to enhance bug bounty hunting efforts and improve the overall security posture of web applications. |
| 2025-08-14 2025 | SQL injection cheat sheet | Web Security Academy beginner 2 min read | Cheatsheet of SQL injection syntax for common attack tasks, including string concatenation, substring extraction, query truncation with comments, database version and content enumeration, conditional errors, batched queries, time delays, DNS lookups, and DNS lookup with data exfiltration, useful for formulating complex attacks and exfiltrating sensitive information. → portswigger.net |
| 2025-08-14 2025 | SQL Injection 101: Common Defense Methods Hackers Should Be Aware Of beginner 5 min read | Reference detailing common SQL injection defense methods including user input escaping, whitelisting, stored procedures, and prepared statements. It emphasizes the principle of least privilege for database accounts and outlines techniques such as parameterized queries to distinguish between code and data, thereby mitigating risks associated with SQL injection vulnerabilities. → null-byte.wonderhowto.com |
| 2024-12-31 2024 | GitHub - danialhalo/SqliSniper: Advanced Time-based Blind SQL Injection fuzzer for HTTP Headers intermediate 3 min read Fuzzing Python | Tool for advanced time-based blind SQL injection fuzzing in HTTP headers. SqliSniper leverages multi-threading for rapid scanning and incorporates response time analysis to reduce false positives. It offers configurable payloads, custom headers, and direct Discord notifications for detected vulnerabilities, making it an efficient solution for security assessments. |
| 2024-11-13 2024 | SQLMap Command Generator beginner | SQLMap Command Generator |
| 2024-08-22 2024 | BChecks/vulnerability-classes/injection at main · PortSwigger/BChecks · GitHub intermediate Burp RCE XSS | BChecks collection for Burp Suite Professional and Burp Suite Enterprise Edition - PortSwigger/BChecks |
| 2023-11-07 2023 | 9 SQLi Detection Tools You Need to Know in 2023 beginner 3 min read | Library of 9 SQLi detection tools for 2024, including SQLMap, Invicti, Burp Suite, jSQL Injection, Appsider, Acunetix, Qualys WAS, HCL AppScan, and Imperva. These tools automate the identification and remediation of SQL injection vulnerabilities in web applications and APIs, mitigating risks such as data theft and unauthorized access. |
| 2023-10-05 2023 | Writeups for Damn Vulnerable Web Application (DVWA) beginner XSS | Writeups for Damn Vulnerable Web Application (DVWA) https://ift.tt/b6djesM |
| 2023-09-22 2023 | How to turn SQL injection into an RCE or a file read? Case study of 128 bug bounty reports intermediate Bug Bounty RCE Talks | The content discusses techniques for leveraging SQL injection vulnerabilities to achieve Remote Code Execution (RCE) or unauthorized file reads. It presents a case study based on 128 bug bounty reports, likely demonstrating real-world examples of such exploits. Viewers can gain insights into the process of escalating SQL injection vulnerabilities into more severe security breaches. The content is likely to provide practical examples and strategies for security researchers or professionals interested in understanding and mitigating these types of cyber threats. |
| 2023-09-03 2023 | TryHackMe | SQHell beginner | Try and find all the flags in the SQL Injections |
| 2023-06-08 2023 | Test website for SQL injection vulnerabilities using Python intermediate Python | Test website for SQL injection vulnerabilities using Python https://ift.tt/msKlYeM |
| 2023-06-01 2023 | Demystifying SQL Injection: A Comprehensive Guide to Understanding SQL Injection Risks beginner 9 min read | Guide to understanding SQL injection risks, detailing in-band, out-of-band, error-based, union-based, time-based, and boolean-based attack techniques. It includes practical examples, like injecting malicious code into search bars and exploiting vulnerabilities such as the Heartland Payment Systems breach, alongside prevention strategies. |
| 2023-05-27 2023 | open-appsec ML-based WAF protects against modern SQLi AutoSpear evasion techniques news 5 min read API Sec | Library protecting against advanced SQL injection evasion techniques, including those from the AutoSpear project. It utilizes machine learning to identify non-legitimate payloads rather than relying solely on traditional parsing and rule sets. This approach effectively counters evolving evasion methods like case swapping, whitespace substitution, comment injection, and various encoding combinations that bypass other WAF solutions such as AWS, Fortinet, F5, CloudFlare, and ModSecurity. |
| 2023-04-18 2023 | Tag Archives: SQL Injection beginner 5 min read | Library for securing Open Data Protocol (OData) connections, building on techniques used to mitigate SQL injection. It acts as an intermediate security layer, applying fine-grained constraints to OData API calls and masking query results based on user entitlements. This is demonstrated with a policy controlling access to the Netflix OData API, restricting minors to G or PG-13 rated movies, and includes authentication, authorization, and auditing of connections. |
| 2023-04-18 2023 | [ODATA-1110] Provide guidance for sql-injection type attacks beginner | [ODATA-1110] Provide guidance for sql-injection type attacks https://ift.tt/9J5LIQb |
| 2023-04-02 2023 | How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty intermediate Bug Bounty | How I Found Multiple SQL Injections in 5 Minutes in Bug Bounty https://ift.tt/8yQVgw5 |
| 2022-11-03 2022 | SQL Injection in GraphQL intermediate | The content discusses the vulnerability of SQL injection in GraphQL, a query language for APIs. This security risk can occur when user input is not properly sanitized, allowing malicious actors to manipulate queries and potentially access or modify sensitive data in the database. It emphasizes the importance of input validation and sanitization to prevent SQL injection attacks in GraphQL applications. |
| 2022-04-11 2022 | Favorite tweet by @harshbothra_ beginner | Favorite tweet: 12 Free Practice Labs to Master SQL Injection 🧵 — Harsh Bothra (@harshbothra_) Apr 11, 2022 |
| 2022-01-16 2022 | How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes intermediate Fuzzing Recon | How I Found multiple SQL Injection with FFUF and Sqlmap in a few minutes |
| 2022-01-07 2022 | Advanced SQL Injection Cheatsheet advanced | Cheatsheet detailing advanced SQL injection techniques. It covers finding injection points, understanding website behavior, enumerating data, bypassing Web Application Firewalls (WAFs), and dumping databases. Methodologies include Error- or UNION-based, Boolean-based (content-based) Blind SQLi, and Time-based SQLi, along with stabilizing injections and bypassing whitespace filters. Privilege escalation and Local File Inclusion (LFI) are also addressed. |
| 2021-11-13 2021 | Web Attack Cheat Sheet beginner 61 min read API Sec Bug Bounty XSS | Cheatsheet detailing web attack techniques and tools, covering discovery, enumeration, scanning, monitoring, and attack methods. It includes specific vulnerabilities such as SSRF, XXE, OAuth, DNS Rebinding, HTTP/SMTP Header Injection, Web Shell, Reverse Shell, SQLi, XSS, XPath Injection, Path Traversal, LFI, SSTI, Information Disclosure, and WebDAV. The resource also lists generic tools for reconnaissance and attack surface mapping, including those for identifying Cloudflare origin IPs and mapping CIDR ranges. |
| 2021-10-04 2021 | 10 Types of Web Vulnerabilities that are Often Missed beginner 16 min read Bug Bounty IDOR SSRF XSS | Library detailing overlooked web vulnerabilities, including HTTP/2 Smuggling exploiting frontend/backend parsing differences, XXE via Office Open XML parsers by crafting malicious OOXML files, SSRF via XSS in PDF generators leveraging headless browser execution for internal resource access, and XSS via SVG files where image upload functionality is present. The resource highlights these as being a step beyond common OWASP Top 10 issues due to obscure delivery methods or common misunderstandings. → labs.detectify.com |
| 2021-04-16 2021 | DVWA 1.9+: Blind SQL Injection with SQLMap intermediate | The content discusses performing Blind SQL Injection on DVWA 1.9+ using SQLMap. It follows a previous article on manual SQL Injection with OWASP ZAP. The focus is on hacking DVWA through Blind SQL Injection techniques. |
| 2021-01-24 2021 | Exploiting Error Based SQL Injections & Bypassing Restrictions intermediate | The article discusses advancing attacks when encountering Error Based SQL Injections. It aims to provide insights on bypassing restrictions in such scenarios. The content likely includes strategies for exploiting vulnerabilities and overcoming limitations in SQL injection attacks. |
| 2021-01-24 2021 | Exploiting second order blind SQL injection intermediate | Hackerone hosted an online Capture The Flag (CTF) event named "12 days of hacky holiday CTF." |
| 2021-01-23 2021 | Website Penetration Testing and Database Hacking with Sqlmap - Secnhack intermediate 6 min read | Tutorial on website penetration testing and database hacking using the open-source tool sqlmap. This guide details how to detect and exploit SQL injection vulnerabilities, a critical flaw identified in the OWASP Top 10. It covers installation on various operating systems, upgrading the tool, and advanced techniques like using Google Dorks for reconnaissance to identify vulnerable parameters. The tutorial walks through commands to dump database names, tables, columns, and ultimately sensitive user credentials from compromised web applications. |
| 2021-01-20 2021 | Identifying & Exploiting SQL Injection: Manual & Automated intermediate | The article discusses identifying and exploiting SQL Injection vulnerabilities in applications. It covers methods for recognizing these vulnerabilities and exploiting them. The content likely includes manual and automated approaches for detecting and taking advantage of SQL Injection weaknesses in software systems. |
| 2020-04-17 2020 | SQL Injection Cheat Sheet by Netsparker beginner 18 min read | Library: Invicti SQL Injection Cheat Sheet, this resource offers detailed technical information and attack payloads for testing various SQL injection vulnerabilities across MySQL, Microsoft SQL Server, Oracle, PostgreSQL, and SQLite. It covers techniques such as UNION attacks, stacked queries, boolean-based blind SQL injection using IF and CASE statements, and bypassing filters with hex encoding and string concatenation. The cheat sheet also highlights the utility of DAST tools like Invicti and Acunetix for automating SQLi detection. |
| 2019-12-29 2019 | SQL injection time and boolean based intermediate | The content discusses SQL injection vulnerabilities, specifically focusing on time-based and boolean-based techniques. It explains how attackers can exploit these vulnerabilities to manipulate database queries and gain unauthorized access to sensitive information. The article likely provides examples, explanations, and possibly mitigation strategies for preventing SQL injection attacks. |
| 2019-11-17 2019 | Understanding the full potential of sqlmap during bug bounty hunting intermediate Bug Bounty | The content discusses utilizing sqlmap, a tool for detecting and exploiting SQL injection vulnerabilities, in bug bounty hunting and ethical hacking for offensive website security. It emphasizes understanding the full potential of sqlmap to effectively identify and exploit vulnerabilities. The focus is on leveraging this tool to enhance security testing efforts and maximize the outcomes of bug bounty programs. |
| 2019-10-05 2019 | SQL injection to RCE advanced RCE | The content discusses a case of SQL injection leading to Remote Code Execution (RCE) discovered during a recent customer penetration testing exercise. The author will detail the scenario in the following lines. |
| 2018-07-29 2018 | Making a Blind SQL Injection a Little Less Blind intermediate | The content discusses the author's experience finding a SQL Injection bug despite the belief that manual SQL Injections are no longer common. The author aims to shed light on this issue and shares insights on how to make a Blind SQL Injection less challenging. |
| 2018-07-19 2018 | Comprehensive Guide to Sqlmap (Target Options) intermediate | The article discusses the "target commands" in sqlmap, a tool for SQL injection attacks. These commands are used to specify the target website or application for the attack. Understanding and utilizing these commands effectively is crucial for successful SQL injection testing. |
| 2018-06-26 2018 | SQL Injection 101: Common Defense Methods Hackers Should Be Aware Of beginner 5 min read | Library on SQL injection defense methods, discussing user input escaping with MySQL examples, whitelisting versus blacklisting, stored procedures, and the superiority of prepared statements using parameterized queries. It also emphasizes the principle of least privilege for database accounts and separate users for different applications to minimize attack impact. → null-byte.wonderhowto.com |
| 2018-05-10 2018 | Barebones Application Security — SQL Injection (SQLi) beginner | The content discusses basic security measures for startups, focusing on SQL Injection (SQLi) vulnerabilities. It is part of a series on application security, highlighting the importance of safeguarding against SQL injection attacks. The series aims to provide startups with essential steps to enhance their security posture. |
| 2018-01-11 2018 | SQL Injection Wiki beginner | Library: SQL Injection Wiki, a comprehensive resource for identifying, exploiting, and escalating SQL injection vulnerabilities across various Database Management Systems. This wiki follows a typical escalation path, assuming basic SQL injection knowledge, and includes version-specific query information. Contributions are welcomed via GitHub. |
| 2017-09-22 2017 | BSQLinjector – Blind SQL Injection Tool Download in Ruby intermediate | Library for performing Blind SQL Injection attacks in Ruby, BSQLinjector utilizes true/false queries to extract data from SQL databases when direct error messages are suppressed. Similar in function to sqlmap, it offers a `--test` switch to preview payloads before execution. |
| 2016-12-28 2016 | SQL Attack (Constraint-based) - Dhaval Kapil advanced 4 min read | Writeup on SQL constraint-based attacks, demonstrating how trailing whitespace padding in SQL string comparisons and truncation of long strings in INSERT statements can be exploited. The attack allows an attacker to register a username with trailing spaces that is then effectively treated as an existing username due to SQL's whitespace handling. Subsequent logins can then be hijacked, as shown on MySQL and SQLite. Defenses include applying UNIQUE constraints to username columns and preferring IDs for data tracking. |