Payload Generator

Build a payload for a specific engine, technique, and context. The same templates drive the examples throughout the guides. Rehearse them against a real database in the sandbox.

Database engineTechniqueInjection contextAppend a comment to terminate the rest of the query

SQLAuthentication bypass
' OR 1=1-- -

Makes the WHERE clause always true. If the app takes the first row, you land on whichever account sorts first.

⚠️ Returns every row. On a login form prefer targeting a known user to avoid logging in as an arbitrary account.

For authorized testing only. Payloads are templates — adjust the target table, column, and column count to the application you are testing. See Injection Contexts for picking the right breakout.