Link to home
Start Free TrialLog in
Avatar of bobPUNKbob
bobPUNKbob

asked on

Decode SQL Injection

My server caught and stopped the SQL injection below but I wanted to find out what the hacker was trying to accomplish (if I hadn't stopped it)? -Thanks!

This was the first attempt (I already URL decoded it):

ID=999999.9 UNION ALL SELECT 0x31303235343830303536--

and then they tried the above injection 31 more times (in 1 second intervals), except each time they added another 0x31303235343830303536, and so the 32nd attempt looked like this:

ID=999999.9 UNION ALL SELECT 0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536,0x31303235343830303536--

When I tried converting 31303235343830303536 from HEX to ASCII, I got 1025480056, but what the heck is that and what does it mean to SQL server?
ASKER CERTIFIED SOLUTION
Avatar of Ephraim Wangoya
Ephraim Wangoya
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ID=999999.9 UNION ALL SELECT 10254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056102548005610254800561025480056

He is trying to do this
select replicate(convert(varchar,0x31303235343830303536),32)
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.