Only returns output when it finds an user where the password equals the username.--start detection "users where the password equals the username"declare @username nvarchar(max)DECLARE userCursor CURSOR FOR SELECT name FROM sys.sql_loginsOPEN userCursorFETCH NEXT FROM userCursor INTO @usernameWHILE @@FETCH_STATUS = 0BEGINif exists(SELECT name FROM sys.sql_logins WHERE PWDCOMPARE(@username, password_hash) = 1)begin select 'username equals password' SELECT name FROM sys.sql_logins WHER
↧