SQLi - fundamentals

https://github.com/payloadbox/sql-injection-payload-listgithub.com

A03 Injection - OWASP Top 10:2021owasp.org

test' OR 1=1; -- #where 1 is the admin user id number in the db

DEFENSE:

https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html

SQL Injection payloads:

'OR 1 OR'

'1 OR 1=1; --

SQL Injection & XSS Playground | Red Team Noteswww.ired.team