--sql-shell

[Fred89]

есть доступ --sql-shell можно менять таблицы базу и т д

интересует можно ли загрузить шелл,
--oc-shell не показывает ls

 

[Fred89]

web server operating system: Linux CentOS
No output
os-shell>

 

[rlz]

You can upload the shell but it depend on the user privilege present to the SQL injection. If the user is low privilege you can move around with --sql-shell but cannot execute or write file to the directory.

More information on the writing file for MySQL https://dev.mysql.com/doc/refman/8.0/en/select-into.html

If you need more information for MSSQL and Postgresql let us know.