---
title: "sqlmap payloads...where are they? - Cybr"
description: "sqlmap payloads...where are they?: a thread from the The Practical Guide to sqlmap for SQL Injection forum on Cybr, with 0 replies. Read-only archive."
url: https://cybr.com/forums/topic/sqlmap-payloads-where-are-they/
---

Topic

# sqlmap payloads...where are they?

0 replies

**Archived.** These forums are read-only. The conversation continues on [Discord](https://cybr.com/discord/).

1. Christophe

   Jan 20, 2022

   I recently had someone ask on YouTube where they could find the SQL injections payloads that sqlmap uses in its tests. Luckily for us, they're all in the same location which makes it easy to find. You can [go here](https://github.com/sqlmapproject/sqlmap/tree/master/data/xml/payloads), and you will see 6 different files:

   - boolean\_blind.xml
   - error\_based.xml
   - inline\_query.xml
   - stacked\_queries.xml
   - time\_blind.xml
   - union\_query.xml

   If you start with the boolean\_blind.xml document first, you'll see additional information about how these files are structured in the comments at the very top. This is super helpful information when trying to figure out how the payloads are organized.

   Keep in mind that you could also technically modify these files on your local machine once you've downloaded sqlmap, so you could add your own payloads or tweak the existing ones. This is where you'd want to do that!

   If you'd like more tips like this or if you'd like to learn how to use sqlmap in-depth, check out our [Practical Guide to sqlmap](https://cybr.com/courses/the-practical-guide-to-sqlmap-for-sql-injection/) course.

[< Back to The Practical Guide to sqlmap for SQL Injection](https://cybr.com/forums/forum/the-practical-guide-to-sqlmap-for-sql-injection/)