# ninja-yubaraj/sql-injection-payloads-list architecture

> Architecture diagram of the GitHub repository ninja-yubaraj/sql-injection-payloads-list, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-11-15). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/ninja-yubaraj/sql-injection-payloads-list
- Repository: https://github.com/ninja-yubaraj/sql-injection-payloads-list

## Overview

Intruder is a payload-list repository, not an executable scanner: it organizes SQL injection probes and exploitation payloads by technique and database. The documented user workflow is to choose payloads for a target and observe responses; the repository provides no runtime orchestration. The README describes generic error-, union-, and blind-SQLi approaches, while the tree adds database-specific detection and exploitation sets. Relationships from an attacker to the payload collections are shown as unverified because no source excerpts establish how users consume them.

Main entry points: [`Intruder/detect`](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect) (Generic probes), [`Intruder/detect/MSSQL`](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MSSQL) (MSSQL probes), [`Intruder/detect/MySQL`](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MySQL) (MySQL probes), [`Intruder/detect/NoSQL`](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/NoSQL) (NoSQL probes)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_detection["Detection Payloads"]
  node_detect_generic["Generic probes"]
  node_detect_mssql["MSSQL probes"]
  node_detect_mysql["MySQL probes"]
  node_detect_nosql["NoSQL probes"]
  node_detect_oracle["Oracle probes"]
  node_detect_xplatform["Cross-platform probes"]
end

subgraph group_exploitation["Exploitation Payloads"]
  node_exploit_generic["Auth bypass<br/>[Auth_Bypass.txt]"]
  node_exploit_db2["DB2 enumeration"]
  node_exploit_mssql["MSSQL enumeration"]
  node_exploit_mysql["MySQL exploits"]
  node_exploit_postgres["Postgres enumeration"]
end

subgraph group_blind["Blind Payloads"]
  node_blind_mssql["MSSQL blind sets"]
  node_blind_mysql["MySQL blind sets"]
end

node_attacker(("Tester"))

node_attacker -.->|"selects probes"| node_detect_generic
node_attacker -.->|"selects probes"| node_detect_mssql
node_attacker -.->|"selects probes"| node_detect_mysql
node_attacker -.->|"selects probes"| node_detect_nosql
node_attacker -.->|"selects probes"| node_detect_oracle
node_attacker -.->|"selects probes"| node_detect_xplatform
node_attacker -.->|"selects payloads"| node_exploit_generic
node_attacker -.->|"selects payloads"| node_exploit_db2
node_attacker -.->|"selects payloads"| node_exploit_mssql
node_attacker -.->|"selects payloads"| node_exploit_mysql
node_attacker -.->|"selects payloads"| node_exploit_postgres
node_attacker -.->|"selects payloads"| node_blind_mssql
node_attacker -.->|"selects payloads"| node_blind_mysql

click node_detect_generic "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect"
click node_detect_mssql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MSSQL"
click node_detect_mysql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MySQL"
click node_detect_nosql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/NoSQL"
click node_detect_oracle "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/Oracle"
click node_detect_xplatform "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/xPlatform"
click node_exploit_generic "https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/Auth_Bypass.txt"
click node_exploit_db2 "https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/DB2/db2-enumeration.txt"
click node_exploit_mssql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/MSSQL/ms-sql-enumeration.txt"
click node_exploit_mysql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/exploit/MySQL"
click node_exploit_postgres "https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/PostgresSQL/postgres-enumeration.txt"
click node_blind_mssql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/payloads-sql-blind/MSSQL"
click node_blind_mysql "https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/payloads-sql-blind/MySQL"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_detect_generic,node_detect_mssql,node_detect_mysql,node_detect_nosql,node_detect_oracle,node_detect_xplatform toneBlue
class node_exploit_generic,node_exploit_db2,node_exploit_mssql,node_exploit_mysql,node_exploit_postgres toneAmber
class node_blind_mssql,node_blind_mysql toneMint
class node_attacker toneIndigo
```

## Components

### Detection Payloads

- [Generic probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect): `Intruder/detect`
- [MSSQL probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MSSQL): `Intruder/detect/MSSQL`
- [MySQL probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/MySQL): `Intruder/detect/MySQL`
- [NoSQL probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/NoSQL): `Intruder/detect/NoSQL`
- [Oracle probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/Oracle): `Intruder/detect/Oracle`
- [Cross-platform probes](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/detect/xPlatform): `Intruder/detect/xPlatform`

### Exploitation Payloads

- [Auth bypass](https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/Auth_Bypass.txt): `Intruder/exploit/Auth_Bypass.txt`
- [DB2 enumeration](https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/DB2/db2-enumeration.txt): `Intruder/exploit/DB2/db2-enumeration.txt`
- [MSSQL enumeration](https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/MSSQL/ms-sql-enumeration.txt): `Intruder/exploit/MSSQL/ms-sql-enumeration.txt`
- [MySQL exploits](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/exploit/MySQL): `Intruder/exploit/MySQL`
- [Postgres enumeration](https://github.com/ninja-yubaraj/sql-injection-payloads-list/blob/main/Intruder/exploit/PostgresSQL/postgres-enumeration.txt): `Intruder/exploit/PostgresSQL/postgres-enumeration.txt`

### Blind Payloads

- [MSSQL blind sets](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/payloads-sql-blind/MSSQL): `Intruder/payloads-sql-blind/MSSQL`
- [MySQL blind sets](https://github.com/ninja-yubaraj/sql-injection-payloads-list/tree/main/Intruder/payloads-sql-blind/MySQL): `Intruder/payloads-sql-blind/MySQL`

### Other components

- **Tester**

## Connections

- Tester → Generic probes: selects probes
- Tester → MSSQL probes: selects probes
- Tester → MySQL probes: selects probes
- Tester → NoSQL probes: selects probes
- Tester → Oracle probes: selects probes
- Tester → Cross-platform probes: selects probes
- Tester → Auth bypass: selects payloads
- Tester → DB2 enumeration: selects payloads
- Tester → MSSQL enumeration: selects payloads
- Tester → MySQL exploits: selects payloads
- Tester → Postgres enumeration: selects payloads
- Tester → MSSQL blind sets: selects payloads
- Tester → MySQL blind sets: selects payloads