📡
Daniel Serbu's CyberSecurity Blog
  • 🔧Welcome
  • 💾Writeups
    • PWNEDLABS Identify the AWS Account ID from a Public S3 Bucket
    • TryHackMe Anthem
    • TryHackMe AttacktiveDirectory
    • TryHackMe Vulnnet: Active
    • TryHackMe Ice
    • TryHackMe Blueprint
    • TryHackMe VulnNet: Roasted
    • TryHackMe Post-Exploitation Basics
    • TryHackMe Lookback
    • MobileHackingLab Food Store
    • MobileHackingLab Notekeeper
    • MobileHackingLab IOT Connect
  • DevSecOps
    • Container Security
      • Kubernetes
    • Infrastructure as Code - IaC
    • Dynamic Application Security Testing - DAST
    • Static Application Security Testing - SAST
    • Software Bill of Materials - SBOM
    • Software Composition Analysis - SCA
    • Source Code Audit
      • PHP Code Review
      • Secure By Design Libraries
    • IDE Plugins for Developers
    • Security Hardening
    • Secure Coding
    • Cheatsheets
    • Mobile
    • Cloud Security
  • OSINT
Powered by GitBook
On this page
  • Cheatsheets and How To's
  • Tools
  • Payloads
  • NoSQL
  1. Penetration Testing
  2. Certification Prep
  3. Burp Suite Certified Practitioner
  4. What to look for
  5. By vulnerability type

SQLi

Last updated 2 years ago

Cheatsheets and How To's

Tools

Payloads

NoSQL

LogoGitHub - kleiton0x00/Advanced-SQL-Injection-Cheatsheet: A cheat sheet that contains advanced queries for SQL Injection of all types.GitHub
LogoSQL Injection Cheat SheetPenetration Testing Services & Red Teaming Experiments
The SQL Injection Knowledge Base
LogoNetSPI SQL Injection Wikinetspi
LogoSQL Injection Cheat Sheet
LogoSQL Injection Cheat Sheet for Developers | AcunetixAcunetix
LogoSQL Injection Cheat Sheet [Ultimate Guide]Hackr.io
LogoSQL InjectionHackTricks
LogoHow to use SQLMAP to test a website for SQL Injection vulnerability - GeeksforGeeksGeeksforGeeks
LogoWhat is SQL Injection? Tutorial & Examples | Web Security AcademyWebSecAcademy
LogoSQL Injection: Bypassing Common Filters
LogoGitHub - Ignitetechnologies/MSSQL-Pentest-CheatsheetGitHub
LogoExploiting SQL Injection at Authorization tokenMedium
SQL Injection filter bypass to perform blind SQL Injection
LogoComma is forbidden! No worries!! Inject in insert/update queries without itRedforce
LogoGitHub - sqlmapproject/sqlmap: Automatic SQL injection and database takeover toolGitHub
LogoGitHub - DanMcInerney/xsscrapy: XSS spider - 66/66 wavsep XSS detectedGitHub
LogoGitHub - m4ll0k/Atlas: Quick SQLMap Tamper SuggesterGitHub
LogoGitHub - eslam3kl/SQLiDetector: Simple python script that helps you to detect SQL injection "Error based" by sending multiple requests with different payloads and check for 152 regex pattern for different databases.GitHub
LogoGitHub - Mr-Robert0/Logsensor: A Powerful Sensor Tool to discover login panels, and POST Form SQLi ScanningGitHub
LogoGitHub - HernanRodriguez1/ScanMySQLiErrorBased-NucleiGitHub
LogoGitHub - r0oth3x49/ghauri: An advanced cross-platform tool that automates the process of detecting and exploiting SQL injection security flawsGitHub
LogoGitHub - PenTestical/sqli: Generic fuzzing wordlist to test for SQLi. Merged from different SQLi wordlists.GitHub
LogoGitHub - payloadbox/sql-injection-payload-list: 🎯 SQL Injection Payload ListGitHub
LogoPayloadsAllTheThings/SQL Injection at master · swisskyrepo/PayloadsAllTheThingsGitHub
LogoGitHub - noob-coder1212/sql-injection-payloadsGitHub
LogoSQL Injection Payloads - Amol BlogAmol Blog
LogoGitHub - Kr0ff/SQL-Injection-Payloads: A list of payloads for SQL Injection testingGitHub
LogoGitHub - limiteci/sql-injection-payloads: simple markdown-list to operate SQL injectionsGitHub
LogoSQL Injection Payloads: How SQLi exploits workBright Security
LogoSQL Injection PayloadsHack$Notes
LogoNoSQL injectionHackTricks
LogoGitHub - C4l1b4n/NoSQL-Attack-Suite: This suite consists of two different scripts, made to automate attacks against NoSQL databases.GitHub
LogoGitHub - an0nlk/Nosql-MongoDB-injection-username-password-enumeration: Using this script, you can enumerate Usernames and passwords of Nosql(mongodb) injecion vulnerable web applications.GitHub
LogoGitHub - codingo/NoSQLMap: Automated NoSQL database enumeration and web application exploitation tool.GitHub