About Sql server Injection through Query strings.

ASCII Encoded/Binary String Automated SQL Injection Attack

Check out the below link to know more how it works.

http://www.bloombit.com/Articles/2008/05/ASCII-Encoded-Binary-String-Automated-SQL-Injection.aspx