Merge pull request #209 from xeroskiller/patch-1

Added tSQL-specific injection string

blns.json

@@ -431,6 +431,7 @@
   "1'; DROP TABLE users-- 1", 
   "' OR 1=1 -- 1", 
   "' OR '1'='1", 
+  "'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --",
   " ", 
   "%", 
   "_", 

blns.txt

@@ -586,6 +586,7 @@ http://a/%%30%30
 1'; DROP TABLE users-- 1
 ' OR 1=1 -- 1
 ' OR '1'='1
+'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --
  
 %
 _
@@ -729,4 +730,4 @@ Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
 #
 # This is a four characters string which includes Persian special characters (گچپژ)
 
-گچپژ
+گچپژ