Skip to content

SQL Injection · passage 29 of 186

BigQuery Injection: BigQuery Comment

Text · SQL Injection/BigQuery Injection.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

Open this passage on GitHub

| Type | Description | | -------------------------- | --------------- | | `#` | Hash comment | | `/* PostgreSQL Comment */` | C-style comment |

Source: SQL Injection/BigQuery Injection.md in PayloadsAllTheThings. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky.

Every one of the 186 is a mark on the map. Named now: 27 to 52, reading order first.

  1. BigQuery Injection: Google BigQuery SQL Injection§ 27text · BigQuery Injection.md
  2. BigQuery Injection: Detection§ 28text · BigQuery Injection.md
  3. BigQuery Injection: BigQuery Comment§ 29text · BigQuery Injection.md
  4. BigQuery Injection: BigQuery Union Based§ 301 code block · BigQuery Injection.md
  5. BigQuery Injection: BigQuery Error Based§ 31text · BigQuery Injection.md
  6. BigQuery Injection: BigQuery Boolean Based§ 321 code block · BigQuery Injection.md
  7. BigQuery Injection: BigQuery Time Based§ 33text · BigQuery Injection.md
  8. Cassandra Injection: Cassandra Injection§ 34text · Cassandra Injection.md
  9. Cassandra Injection: CQL Injection Limitations§ 35text · Cassandra Injection.md
  10. Cassandra Injection: Cassandra Comment§ 361 code block · Cassandra Injection.md
  11. Cassandra Injection: Example #1§ 371 code block · Cassandra Injection.md
  12. Cassandra Injection: Example #2§ 382 code blocks · Cassandra Injection.md
  13. DB2 Injection: DB2 Injection§ 39text · DB2 Injection.md
  14. DB2 Injection: DB2 Comments§ 40text · DB2 Injection.md
  15. DB2 Injection: DB2 Default Databases§ 41text · DB2 Injection.md
  16. DB2 Injection: DB2 Enumeration§ 42text · DB2 Injection.md
  17. DB2 Injection: DB2 Methodology§ 43text · DB2 Injection.md
  18. DB2 Injection: DB2 Error Based§ 441 code block · DB2 Injection.md
  19. DB2 Injection: DB2 Blind Based§ 45text · DB2 Injection.md
  20. DB2 Injection: DB2 Time Based§ 461 code block · DB2 Injection.md
  21. DB2 Injection: DB2 Command Execution§ 472 code blocks · DB2 Injection.md
  22. DB2 Injection: Avoiding Quotes§ 481 code block · DB2 Injection.md
  23. DB2 Injection: DB2 Accounts and Privileges§ 49text · DB2 Injection.md
  24. MSSQL Injection: MSSQL Injection§ 50text · MSSQL Injection.md
  25. MSSQL Injection: MSSQL Default Databases§ 51text · MSSQL Injection.md
  26. MSSQL Injection: MSSQL Comments§ 52text · MSSQL Injection.md

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.

Updated AboutDevelopersSign in