Test files › Security and validation › sql-injection-payloads.txt
Sample TXT file
Newline-delimited SQL injection strings for input-validation fuzzing. Includes tautologies, comment terminators, union probes and stacked-query syntax.
↓ Download sql-injection-payloads.txt| Filename | sql-injection-payloads.txt |
| Format | TXT |
| Size | 157 bytes (157 bytes) |
| MIME type | text/plain; charset=utf-8 |
| SHA-256 | 520b4965c786607d39fcfa27a840d0e6e99c7074e0703dccbcb0537ae316e0d3 |
What this file catchesForm fields and query parameters that concatenate rather than parameterise. Every one of these should be stored and echoed back as a literal string.
Download & verify
curl -fsSL -o "sql-injection-payloads.txt" "https://files.hexaqa.com/security/sql-injection-payloads.txt"
curl -fsSL "https://files.hexaqa.com/security/sql-injection-payloads.txt" | sha256sum
# expect: 520b4965c786607d39fcfa27a840d0e6e99c7074e0703dccbcb0537ae316e0d3