VERIFIED QUESTIONS AND SOLUTIONS
◉MS-SQL : DB Version. Answer: SELECT @@version
EXEC xp_msver
(detailed version info)
◉MS-SQL : Run OS Command. Answer: EXEC master..xp_cmdshell
'net user'
◉MS-SQL : SELECT commands. Answer: SELECT HOST_NAME( ) :
Hostname and IP
SELECT DB_NAME ( ) : Current DB
SELECT name FROM master..sysdatabases; : List DBs
SELECT user_name ( ) : Current user
,SELECT name FROM master..syslogins : List users
SELECT name FROM master..sysobjects WHERE xtype='U'; : List
Tables
SELECT name FROM syscolumns WHERE id=(SELECT id FROM
sysobjections WHERE name='mytable'); : List columns
◉MS-SQL : List all Tables and Columns. Answer: SELECT name
FROM syscolumns WHERE id = (SELECT id FROM sysobjects WHERE
name = 'mytable')
◉MS-SQL : System Table (Info on All Tables). Answer: SELECT TOP 1
TABLE_NAME FROM INFORMATION_SCHEMA.TABLES
◉MS-SQL 2005 Vulnerability (Password Hashes). Answer: SELECT
name, password_hash FROM master.sys.sql_logins
◉Postgres : SELECT commands. Answer: SELECT version(); : DB
Version
SELECT inet_server)addr(); : Hostname and IP
SELECT current_database(); : Current DB
, SELECT datname FROM pg_database; : List DBs
SELECT user; : Current user
SELECT username FROM pg_user; : List Users
SELECT username,passwd FROM pg_shadow : List password hashes
◉MySQL Default Credentials. Answer: root | MYSQL
◉MySQL : SELECT Commands. Answer: SELECT @@version; : DB
Version
SELECT @@hostname; : Hostname and IP
SELECT database(); : Current DB
SELECT distinct (db) FROM mysql.db; : List DBs
SELECT user(); : Current user