Skip to content

h3zh1/fakeMysql

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 

Repository files navigation

伪造恶意服务器,读取MySQL客户端上的文件

利用MySQL LOAD DATA特性达到任意文件读取

运行服务后,客户端请求服务器,服务端就会读取客户端本地的文件

参考: https://www.vesiluoma.com/abusing-mysql-clients/

About

Read MySQL Client's File

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%