1. SQL Injection

2. Let’s find some holes

3. Hackers DVD has ID of 1

4. Sneakers DVD has ID of 3

5. Check for SQL Injection

6. Exactly what I was looking for

7. Execute some SQL Injection (select top 1 name from sysobjects where xtype=‘u’): ‘ Grab the first table name off of the user defined tables’ The result from this will be a string with a value of ‘dtproperties’. This is the first table name Convert(int,’output of select statement’): This will attempt to convert the tablename which is a string to an integer which will fail and cause a nice error message stating what failed from the database server.

8. The first table is ‘dtproperties’

9. Rotate thru the table names

10. Next one is ‘tbl_categories’

11. Credit cards – This is too much fun

12. SQL Injection is too much work - Automate

13. All the table names in under a second

14. All the columns

15. The entire database in 3 clicks