basic web hacking 21

hi,i understand the principles behind sql injection and i think for basic 21 i need to inject both the username and password specifically for mssql.It is here that i am getting the touble.I have tried 'o* ***** but i am getting errors does this have to do with the syntac.I'll appreciate any help.

This is a MSSQL injection NOT MySQL I think this will be kewl :)

Good Luck…

since Im on this too I guess ill just hijack this thread!

I got all the column names, but none of the type conversion error things seem to make error messages…I tried INSERT INTO, and UNION SELECT sum(_) but neither of them caused an error message. Any hints?

Thanks for that e-book.. yeah… i learn something new again and again and again.. :D