利用SQL Server的注入漏洞实现猜解数据库名，表名，字段名及记录的信息，由于网速的原因，目前限制了只能同时猜解前5个字段值的记录信息。另外实现了三种方式执行系统命令，同时可回显显示。-use SQL Server injection vulnerability achieve guess Solutions database name, table names, field names and the information recorded, the speed network, cur

TDS协议分析与漏洞检测,使用SQL SERVER 者可参考学习此文档-TDS protocol analysis and vulnerability detection, using SQL SERVER learning may refer to this document