30 Aug · Robert Eisele
How It Was Possible to Get Root Access Through MySQL
This historical security analysis reconstructs the four-step MySQL UDF abuse chain that could turn SQL injection or weak database credentials...
Open-Source Software
Libraries
- BitSet.js: Arbitrary-Size Bit Vectors
- Complex.js
- Compute a Symbolic Gradient with SymPy
- dhcp.js: A DHCP client and server for Node.js
- Fraction.js
- Gamecontroller.js: Read USB Controllers in Node.js
- GPS.js: NMEA Parser in JavaScript
- Intersection.js: 2D Geometry Intersection Library in JavaScript
- jQuery borderStyle
- jQuery Paging
- jQuery xcolor
- Milter.js: A Milter Protocol Library for Node.js
- mod_mysql_accesslog: MySQL Logging for lighttpd
- MySQL Infusion UDF: Native Functions for MySQL
- PHP-Defcon: Persistent Constants for PHP 5
- PHP-IDNA: Internationalized Domain Names for PHP
- PHP-Infusion: Native Utility Functions for PHP
- PHP-Sysload: Load-Aware PHP Backends
- PNGlib.js: A Small JavaScript PNG Encoder
- Read CSV Data into an Eigen Matrix
- Symbolic Quaternion Operations with SymPy
- Tag Cloud Plugin for Smarty
Drivers
Games
Administration
- Add HTTP Response Headers in lighttpd
- Combine CSS and JavaScript with lighttpd
- Debian SysV Init Script for lighttpd
- Enable Key Repeat and Disable the Accent Menu on macOS
- Flash a Linux Image to an SD Card on macOS
- Generate and Cache Thumbnails on Demand with lighttpd
- Keep an Unlinked File Open on Unix
- Set Up a Production Mail Server with Postfix, Dovecot, and MySQL
- Set Up Internet Sharing on macOS from the Command Line
- Use ChatGPT or Ollama as a Spam Filter for Postfix and Dovecot
Graphics
- Winamp Equalizer
- 3D Wire Creator
- Bubble Drag - Interactive Canvas Motion
- Bubble Evolution - Draggable Magnifier
- Build a 3D Advent Calendar with HTML, CSS, and JavaScript
- Circular Sectors and Annular Arcs in OpenSCAD
- Follow the Swarm
- HTML5 Particleline - An Interactive Canvas Field
- Introduction to CSS 3D Transforms
- Kinematic Clock with Nested SVG Transforms
- Point Orientation Relative to a Directed Line
Computer Vision
Databases
- Analyze User Activity Patterns with MySQL and PHP
- A Programmable Query Layer on Top of MySQL
- Avoid N+1 Queries with MySQL JSON Aggregation
- Build a Circular Buffer in MySQL
- Building a Tag Cloud with MySQL
- Calculate Age Correctly in MySQL
- Calculate the Next Birthday in MySQL
- Can MySQL Query Parsing Be Avoided?
- Connect to Microsoft SQL Server with Python
- Efficient Flag-Based Counts in MySQL
- Efficient Pagination in MySQL
- Finding Friends of Friends with MySQL
- Finding People Near You with MySQL 8.4
- Full-Text Location Search with MySQL 8.4
- How It Was Possible to Get Root Access Through MySQL
- Import Wikipedia into MySQL with MediaWiki
- Indexing Text Columns in MySQL 8.4
- Mask IPv6 Addresses with MySQL
- Model Many-to-Many Relationships in MySQL
- MySQL Wishlist Revisited for MySQL 8.4
- Persisting a Custom Sort Order in MySQL
- Preserve ON UPDATE CURRENT_TIMESTAMP in MySQL
- Reliable Asynchronous Writes with MySQL
- Running Standard Deviation in MySQL
- Set and Clear Bit Flags Atomically in MySQL
- Should MySQL VARCHAR Lengths Be Powers of Two?
- SQL NULL and Three-Valued Logic
- Statistical Analysis with MySQL 8.4
- Stream SQL to MySQL with Netcat
- TF-IDF Related-Article Ranking with MySQL 8.4
- The Best SQL Mode Configuration for MySQL 8.4
Networking
Programming
- Build a PHP Daemon and Run It as a Linux Service
- Forcing Garbage Collection in Node.js
- Inside an Experimental PHP 5.3 Language Fork
- Packing Small Integers into Bit Fields
- Pipe Data from Node.js to C
- Set Excel Column Width in Points with VBA
- Why I Didn't Get a Single New .de Domain
- Write a PID File Safely in Bash