Peter Vreugdenhil
wtfuzz.bsky.social
Peter Vreugdenhil
@wtfuzz.bsky.social
Security Researcher.
I always find it funny and ironic that Fortune 100 companies that provide security software and pen testing for customers still sell their own software full of easy to find RCEs.
January 17, 2025 at 2:23 PM
Very Niche exploitation trick for those who need it. mysql ‘select into file’ does not create subdirectories. But if you have enough control:
CREATE TABLE A(A INT) DATA DIRECTORY=‘/go/completely/wild/here/‘;
This will happily create all subdirectories.
January 8, 2025 at 3:53 PM