1
0
mirror of https://github.com/minimaxir/big-list-of-naughty-strings.git synced 2025-09-03 10:53:01 +02:00

Added tSQL-specific injection string

Leverages built in sproc to drop all tables, instead of guessing a table name;
This commit is contained in:
Travis Manning
2020-05-14 08:59:56 -04:00
committed by GitHub
parent ff8b1b2105
commit a9bae33a08

View File

@@ -586,6 +586,7 @@ http://a/%%30%30
1'; DROP TABLE users-- 1
' OR 1=1 -- 1
' OR '1'='1
'; EXEC sp_MSForEachTable 'DROP TABLE ?'; --
%
_
@@ -729,4 +730,4 @@ Powerلُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ冗
#
# This is a four characters string which includes Persian special characters (گچپژ)
گچپژ
گچپژ