#####################################################################
# Title: Advanced Sql Injection including Mysql,Mssql & a guide to oracle
# Date : 22 January 2011
# Author: Cyb3R_ShubhaM aKa...
declare @tablename nvarchar(50)
declare @PKname nvarchar(50)
set @tablename='DebitDetailTB20080907'
select @PKname=name from sys.objects
where type='pk' and parent_object_id in(
...
-- 查询 数据库 视图
SELECT * FROM sysdatabases ;
-- 查询 表 视图
SELECT * from sysobjects
WHERE 1 = 1 AND XTYPE IN ('U','V')
order by name;
/**
* 查询 列 视图
* OBJEC...
