4.1.3. Privilege Escalation¶
4.1.3.1. UDF Privilege Escalation¶
UDF(User Defined Function)is a function provided by MySQL. You can add new functions to MySQL by writing DLL extensions to expand its functions.
After obtaining MySQL permissions, you can upload custom extension files in this way and execute system commands from MySQL.