SQL Injection Toy (SQL IT)

This is a free helper to experiment and analyze SQL Injections, meant for educational purposes only.

Usage is absolutely anonymous, i.e. nothing is recorded by the hackademix.net servers after the initial access to this page. Specifically, no data entered in this form is even transmitted to hackademix.net servers.

Notwithstanding, every test/query can be stored as a bookmark and edited/replayed later, because data is serialized in the fragment URI component (invisible server-side). No cookies are being used either.

Select a DB Type:

Enter base URL:

Enter SQL injection to be appended or placed instead of %SQL%:

Parameters

Use @parmName placeholders in the SQL to specify string parameters to be encoded.

Submission

Use one of the links below to submit your query. No data is transmitted to the hackademix.net servers and no Referer HTTP header is sent to the target host.

New window/tab | Internal frame | Same window POST method*

* POST payload will be removed by NoScript's anti-XSS/CSRF countermeasures if target site is trusted.

SQL Preview

URL Preview

Copyright © 2007-... Giorgio Maone

Bug reports, suggestions, praises and death threats here