mirror of
https://github.com/minimaxir/big-list-of-naughty-strings.git
synced 2025-09-03 10:53:01 +02:00
Added tSQL-specific injection string
Leverages built in sproc to drop all tables, instead of guessing a table name;
This commit is contained in:
3
blns.txt
3
blns.txt
@@ -586,6 +586,7 @@ http://a/%%30%30
|
||||
1'; DROP TABLE users-- 1
|
||||
' OR 1=1 -- 1
|
||||
' OR '1'='1
|
||||
'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --
|
||||
|
||||
%
|
||||
_
|
||||
@@ -729,4 +730,4 @@ Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
|
||||
#
|
||||
# This is a four characters string which includes Persian special characters (گچپژ)
|
||||
|
||||
گچپژ
|
||||
گچپژ
|
||||
|
Reference in New Issue
Block a user