# SQL Injection Samples

Educational collection of SQL injection payloads for security testing, vulnerability assessment, and defensive coding practices

> Canonical page: https://elysiatools.com/en/samples/sql-injections

- **Category:** Security

- **Keywords:** sql, sql injection, database, security, web security, penetration testing, vulnerability

## Overview

Educational collection of SQL injection payloads for security testing, vulnerability assessment, and defensive coding practices

## Examples

- **Classic SQL Injection Patterns**: Fundamental SQL injection techniques - authentication bypass, OR 1=1, UNION SELECT, comment-based injections, and database enumeration
- **UNION-based SQL Injections**: Advanced SQL injection using UNION SELECT to extract data from other tables - column enumeration, database fingerprinting, and data extraction
- **Boolean-based Blind SQL Injections**: Blind SQL injection exploiting true/false conditions - database enumeration, data extraction through boolean logic, and conditional testing
- **Time-based Blind SQL Injections**: SQL injection using database response time - SLEEP(), WAITFOR DELAY, BENCHMARK(), and time-based data extraction techniques
- **Stored Procedure SQL Injections**: SQL injection through stored procedures - xp_cmdshell, sp_oacreate, file operations, and advanced database command execution

## When to use

- Use this sample set when you want reference inputs for SQL Injection Samples.
- Use it to preview output formats and compare related sample variants.

## How it works

- Open a sample entry to inspect the prepared example payload or asset.
- Compare it with related tools to understand how the workflow connects.

## Use cases

- Classic SQL Injection Patterns
- UNION-based SQL Injections
- Boolean-based Blind SQL Injections
- Time-based Blind SQL Injections
- Stored Procedure SQL Injections

## Frequently asked questions

### What is included in SQL Injection Samples?

This page includes curated sample entries, related tools, and neighboring sample collections for SQL Injection Samples.

## Related tools

- [SQL Injection Detector](https://elysiatools.com/en/tools/sql-injection-detector): Detect common SQL injection attack patterns in input strings
- [SQL Explain Plan Visualizer](https://elysiatools.com/en/tools/sql-explain-plan-visualizer): Parse EXPLAIN / EXPLAIN ANALYZE output (PostgreSQL/MySQL/SQLite) into a cost tree, flag estimated-vs-actual row divergence, and suggest indexes
- [CSV Flavor to SQL INSERT Emitter](https://elysiatools.com/en/tools/csv-flavor-to-sql-insert-emitter): Parse CSV/Excel-CSV/TSV (auto dialect, RFC 4180) into MySQL/PostgreSQL/SQLite/SQL Server INSERT batches with type inference and ON CONFLICT/IGNORE
- [SQL Formatter](https://elysiatools.com/en/tools/sql-formatter): Format SQL queries
- [SQL Performance Analyzer](https://elysiatools.com/en/tools/sql-performance-analyzer): Analyze SQL queries for potential performance issues
- [SQL Query Builder](https://elysiatools.com/en/tools/sql-query-builder): Build simple SQL queries visually
- [XLSX SQL Insert Generator](https://elysiatools.com/en/tools/xlsx-sql-insert-generator): Read Excel headers and rows to generate SQL INSERT statements for bulk loading
- [SQL Dialect Bridge](https://elysiatools.com/en/tools/sql-dialect-bridge): Translate SQL between MySQL, PostgreSQL, SQLite, BigQuery, Snowflake, and Redshift — DDL, DML, functions and types, with UNSUPPORTED warnings

## Related content

- [Web Database Python Samples](https://elysiatools.com/en/samples/web-database-python): Web Python database examples including SQLite connection, SQL queries, and transaction handling
- [Log Files with Sensitive Data](https://elysiatools.com/en/samples/log-with-sensitive-data): Sample log files containing various types of PII (Personally Identifiable Information) for testing PII detection and log redaction tools
- [PostgreSQL Advanced Samples](https://elysiatools.com/en/samples/postgresql-advanced): Advanced PostgreSQL database examples including optimization strategies, complex queries, indexing, and performance tuning
- [SQL Scripts Samples](https://elysiatools.com/en/samples/sql-samples): SQL query examples and database scripts for various scenarios and use cases (primarily MySQL syntax)
- [MongoDB Samples](https://elysiatools.com/en/samples/mongodb): Comprehensive MongoDB NoSQL database examples including CRUD operations, aggregation framework, indexing, and scaling strategies
- [Redis Samples](https://elysiatools.com/en/samples/redis): Comprehensive Redis cache solution examples including basic operations, pub/sub patterns, clustering, and performance optimization