目录
1. User-defined function injection(UDF)模块的帮助文档
User-defined function injection:
These options can be used to create custom user-defined functions
--udf-inject Inject custom user-defined functions
--shared-lib=SHLIB Local path of the shared library
UDF即 user-defined function,是一种针对MySQL和PostgreSQL的高级注入技术,可参考Advanced SQL injection to operating system full control。
该功能仅在数据库管理系统是MySQL或PostgreSQL时可用。
2. 各个参数的介绍
2.1 --udf-inject
参数:–udf-inject
<