Research lab
Internal catalog of demo endpoints (linked for crawlers).
Shop & content
V26 sinks
V27 sinks
- /v27_extractvalue.php?id=1
- /v27_updatexml.php?pid=1
- /v27_gtid.php?uid=1
- /v27_exp.php?n=1
- /v27_jsonkeys.php?k=1
- /v27_uuid.php?id=1
- /v27_floor.php?cat=electronics
- /v27_geohash.php?g=1
- /v27_cast.php?id=1
- /v27_union.php?id=1
- /v27_union_products.php?sku=LP-15
- /v27_union_orders.php?oid=1
- /v27_bool.php?id=1
- /v27_bool_user.php?name=admin
- /v27_bool_flag.php?flag=1
- /v27_time.php?id=1
- /v27_time_search.php?q=Laptop
- /v27_time_status.php?st=shipped
- /v27_header_xff.php
- /v27_header_realip.php
- /v27_cookie_filter.php
- /v27_cookie_uid.php
- /v27_multi.php?id=1
- /v27_stacked.php?id=1
- /v27_graphql.php?id=1
API
Admin
Path routes
Error oracles
- /err/bigint.php?id=1
- /err/nameconst.php?id=1
- /err/procedure.php?id=1
- /err/polygon.php?id=1
- /err/bin2uuid.php?id=1
- /err/convert.php?id=1
- /err/cast_where.php?id=1
- /err/floor2.php?cat=guides
- /err/extractvalue2.php
- /err/updatexml2.php
- /err/jsonkeys2.php?k=1
- /err/gtid2.php?uid=1
- /err/geohash2.php?g=1
- /err/exp2.php?n=1
UNION
Boolean
Time
Vectors
CVE-shaped
Cookies
Header sinks
- /hdr/accept_language.php
- /hdr/akamai_client_ip.php
- /hdr/authorization.php
- /hdr/cf_connecting_ip.php
- /hdr/client_ip.php
- /hdr/fastly_client_ip.php
- /hdr/forwarded.php
- /hdr/from.php
- /hdr/host.php
- /hdr/origin.php
- /hdr/referer.php
- /hdr/site.php
- /hdr/true_client_ip.php
- /hdr/user_agent.php
- /hdr/via.php
- /hdr/x_access_token.php
- /hdr/x_account_id.php
- /hdr/x_api_key.php
- /hdr/x_api_version.php
- /hdr/x_auth_token.php
- /hdr/x_client_ip.php
- /hdr/x_cluster_client_ip.php
- /hdr/x_custom_ip_authorization.php
- /hdr/x_customer_id.php
- /hdr/x_filter.php
- /hdr/x_forwarded_for.php
- /hdr/x_forwarded_host.php
- /hdr/x_forwarded_port.php
- /hdr/x_forwarded_prefix.php
- /hdr/x_forwarded_proto.php
- /hdr/x_forwarded_server.php
- /hdr/x_forwarded_tenant.php
- /hdr/x_host.php
- /hdr/x_org_id.php
- /hdr/x_original_forwarded_for.php
- /hdr/x_original_host.php
- /hdr/x_original_remote_addr.php
- /hdr/x_original_url.php
- /hdr/x_originating_ip.php
- /hdr/x_proxyuser_ip.php
- /hdr/x_query.php
- /hdr/x_real_ip.php
- /hdr/x_remote_addr.php
- /hdr/x_remote_ip.php
- /hdr/x_requested_with.php
- /hdr/x_rewrite_url.php
- /hdr/x_search.php
- /hdr/x_session_id.php
- /hdr/x_sort.php
- /hdr/x_tenant_id.php
- /hdr/x_user_id.php
- /hdr/x_wap_profile.php
- /hdr/x_workspace.php