Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SQL - 48 bytes #140

Open
mattpass opened this issue Sep 5, 2024 · 0 comments
Open

SQL - 48 bytes #140

mattpass opened this issue Sep 5, 2024 · 0 comments
Labels
BGGP Entry Needs Verification This entry needs verification

Comments

@mattpass
Copy link

mattpass commented Sep 5, 2024

Please fill out the following:

---BEGIN BGGPx---
Submit Date: 5th Sep 2024
BGGP Challenge Number: 5
Author: mattpass
Contact Info (Optional): 
Online Presence (Website/Social Media): @mattpass (X)
Target File Type: SQL (.sql)
File Size: 48 bytes
SHA256 Hash: e03f0b78062fa6a3d6deb9e03724e2e30d1a2f2a79c1bd104f316a75339b0901
Target Environment (How do we run the file?): Example: for Linux distro...
# --------
# Get sqlite, executable binary for sqlite-http, extract http0.so from tar.gz file, rename it 0.so, create entry file 5.sql
sudo apt install sqlite3
wget https://github.com/asg017/sqlite-http/releases/download/v0.1.1/sqlite-http-v0.1.1-loadable-linux-x86_64.tar.gz -O sqlite-http.tar.gz
tar -xvzf sqlite-http.tar.gz
mv http0.so 0.so
base64 -d <<< 'LmxvYWQgLi8wCnNlbGVjdCBodHRwX2dldF9ib2R5KCdodHRwOi8vN2YudWsnKTs' > 5.sql
# Now everything is available, we're ready to execute the file...
sqlite3 < 5.sql
# --------
Any additional info?: Uses shorter domain 7f.uk to save bytes
Link to PoC video, screenshot, or console output, if any: -
Link to writeup, if any: https://pastebin.com/pAcukVNK
File contents (base64 encoded please): LmxvYWQgLi8wCnNlbGVjdCBodHRwX2dldF9ib2R5KCdodHRwOi8vN2YudWsnKTs
---END BGGPx---

If this is an update to an existing entry, please include a link to your entry below this text. Reminder that authors can only update an entry once during BGGP.

@mattpass mattpass added BGGP Entry Needs Verification This entry needs verification labels Sep 5, 2024
@mattpass mattpass changed the title SQL - 51 bytes SQL - 48 bytes Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
BGGP Entry Needs Verification This entry needs verification
Projects
None yet
Development

No branches or pull requests

1 participant