Scribd
Upload
304 views3 pages

DB2 SQL Injection Cheat Sheet

This document provides a cheat sheet for performing SQL injection on databases backed by Microsoft SQL Server. It includes queries for gathering information like the database and server version, current user, database privileges, and listings of databases, tables, and columns. Many of the queries are marked as only being executable by an admin user. The cheat sheet is intended to make the data easier to read and use across different database backends by using a consistent table format. It remains a work in progress, with some queries marked as TODO to be explored further.

Uploaded by

quedyah
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
304 views3 pages

DB2 SQL Injection Cheat Sheet

This document provides a cheat sheet for performing SQL injection on databases backed by Microsoft SQL Server. It includes queries for gathering information like the database and server version, current user, database privileges, and listings of databases, tables, and columns. Many of the queries are marked as only being executable by an admin user. The cheat sheet is intended to make the data easier to read and use across different database backends by using a consistent table format. It remains a work in progress, with some queries marked as TODO to be explored further.

Uploaded by

quedyah
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

'%64/,QMHFWLRQ&KHDW6KHHW

)LQGLQJD64/LQMHFWLRQYXOQHUDELOLW\LQDZHEDSSOLFDWLRQEDFNHGE\'%LVQWWRRFRPPRQ
LQP\H[SHULHQFH:KHQ\RXGRILQGRQHWKRXJKLWSD\VWREHSUHSDUHG
%HORZDUHVRPHWDEXODWHGQRWHVRQKRZWRGRPDQ\RIWKLQJ\RXGQRUPDOO\GRYLD64/
LQMHFWLRQ$OOWHVWVZHUHSHUIRUPHGRQ'%XQGHU:LQGRZV
7KLVSRVWLVSDUWRIVHULHVRI64/,QMHFWLRQ&KHDW6KHHWV,QWKLVVHULHV,YHHQGHYRXUHG
WRWDEXODWHWKHGDWDWRPDNHLWHDVLHUWRUHDGDQGWRXVHWKHVDPHWDEOHIRUIRUHDFK
GDWDEDVHEDFNHQG7KLVKHOSVWRKLJKOLJKWDQ\IHDWXUHVZKLFKDUHODFNLQJIRUHDFK
GDWDEDVHDQGHQXPHUDWLRQWHFKQLTXHVWKDWGRQWDSSO\DQGDOVRDUHDVWKDW,KDYHQWJRW
URXQGWRUHVHDUFKLQJ\HW
7KHFRPSOHWHOLVWRI64/,QMHFWLRQ&KHDW6KHHWV,PZRUNLQJLV
2UDFOH
0664/
0\64/
3RVWJUH64/
,QJUHV
'%
,QIRUPL[
,PQRWSODQQLQJWRZULWHRQHIRU06$FFHVVEXWWKHUHVDJUHDW06$FFHVV&KHDW6KHHW
KHUH
6RPHRIWKHTXHULHVLQWKHWDEOHEHORZFDQRQO\EHUXQE\DQDGPLQ7KHVHDUHPDUNHG
ZLWKSULYDWWKHHQGRIWKHTXHU\
9HUVLRQ

VHOHFWYHUVLRQQXPEHUYHUVLRQBWLPHVWDPSIURPV\VLEPV\VYHUVLRQV

&RPPHQWV

VHOHFWEODKIURPIRRFRPPHQWOLNHWKLV

&XUUHQW8VHU

VHOHFWXVHUIURPV\VLEPV\VGXPP\
VHOHFWVHVVLRQBXVHUIURPV\VLEPV\VGXPP\
VHOHFWV\VWHPBXVHUIURPV\VLEPV\VGXPP\

/LVW8VHUV

1$ ,WKLQN'%XVHV26OHYHOXVHUDFFRXQWVIRU
DXWKHQWLFDWLRQ 'DWDEDVHDXWKRULWLHV OLNHUROHV,WKLQN FDQEHOLVWHG
OLNHWKLV
VHOHFWJUDQWHHIURPV\VFDWGEDXWK

/LVW3DVVZRUG
+DVKHV

1$ ,WKLQN'%XVHV26OHYHOXVHUDFFRXQWVIRUDXWKHQWLFDWLRQ

/LVW3ULYLOHJHV

VHOHFW IURPV\VFDWWDEDXWKSULYVRQWDEOHV

VHOHFW IURPV\VFDWGEDXWKZKHUHJUDQWHH FXUUHQWXVHU


VHOHFW IURPV\VFDWWDEDXWKZKHUHJUDQWHH FXUUHQWXVHU
VHOHFW IURP6<6,%06<686(5$87+/LVWGEV\VWHPSULYLOHJLHV
/LVW'%$
$FFRXQWV

VHOHFWQDPHIURP6<6,%06<686(5$87+ZKHUH6<6$'0$87+
<RU6<6$'0$87+ *

&XUUHQW
'DWDEDVH

VHOHFWFXUUHQWVHUYHUIURPV\VLEPV\VGXPP\

/LVW'DWDEDVHV

6(/(&7VFKHPDQDPH)520V\VFDWVFKHPDWD

/LVW&ROXPQV

VHOHFWQDPHWEQDPHFROW\SHIURPV\VLEPV\VFROXPQV

/LVW7DEOHV

VHOHFWQDPHIURPV\VLEPV\VWDEOHV

)LQG7DEOHV
)URP&ROXPQ
1DPH

VHOHFWWEQDPHIURPV\VLEPV\VFROXPQVZKHUHQDPH XVHUQDPH

6HOHFW1WK5RZ

VHOHFWQDPHIURP 6(/(&7QDPH)520V\VLEPV\VWDEOHVRUGHUE\
QDPHIHWFKILUVW10URZVRQO\ VTRUGHUE\QDPHGHVFIHWFKILUVW
1URZVRQO\

6HOHFW1WK
&KDU

6(/(&768%675 DEF )520V\VLEPV\VGXPP\UHWXUQV


E

%LWZLVH$1'

7KLVSDJHVHHPVWRLQGLFDWHWKDW'%KDVQRVXSSRUWIRUELWZLVH
RSHUDWRUV

$6&,,9DOXH!
&KDU

VHOHFWFKU  IURPV\VLEPV\VGXPP\UHWXUQV$

&KDU!$6&,,
9DOXH

VHOHFWDVFLL $ IURPV\VLEPV\VGXPP\UHWXUQV

&DVWLQJ

6(/(&7FDVW DVLQWHJHU )520V\VLEPV\VGXPP\


6(/(&7FDVW DVFKDU )520V\VLEPV\VGXPP\

6WULQJ
&RQFDWHQDWLRQ

6(/(&7DFRQFDWEFRQFDWF)520V\VLEPV\VGXPP\
UHWXUQVDEF
VHOHFWD__EIURPV\VLEPV\VGXPP\UHWXUQVDE

,I6WDWHPHQW

72'2

&DVH
6WDWHPHQW

72'2

$YRLGLQJ
4XRWHV

72'2

7LPH'HOD\

"""6HH+HDY\4XHULHVDUWLFOHIRUVRPHLGHDV

0DNH'16
5HTXHVWV

72'2

&RPPDQG

72'2

([HFXWLRQ
/RFDO)LOH
$FFHVV

72'2

+RVWQDPH,3
$GGUHVV

72'2

/RFDWLRQRI'%
ILOHV

72'2

'HIDXOW6\VWHP
'DWDEDVHV

72'2

7KLVSDJHZLOOSUREDEO\UHPDLQDZRUNLQSURJUHVVIRUVRPHWLPH\HW,OOXSGDWHLWDV,
OHDUQPRUH

7KDQNV
3HQWHVWPRQNH\JUDWHIXOO\DFNQRZOHGJHVWKHFRQWULEXWLRQVRI
UPYN
$GULiQIRUILJXULQJRXWORWVRIWKH72'2LWHPVDERYH
KWWSVHFXULW\HWDOLLHVGEVTOLQMHFWLRQFKHDWVKHHW
7DJVFKHDWVKHHWGDWDEDVHGESHQWHVWVTOLQMHFWLRQ
3RVWHGLQ64/,QMHFWLRQ

You might also like