Preliminary research
No Extensions? You Forgot One: Writing Shared Objects to RCE via SQLite's dbpage
AI-collected research leads through 1 October 2026, including a bounded September review of selected social and community sources. Unranked, incomplete, not community-vetted, and subject to change.
Stacked SQLite injection uses sqlite_dbpage to overwrite raw pages and create files with far fewer fixed header bytes than ATTACH DATABASE. Relocating the ELF program-header table enables shared-object module shadowing and restart-triggered code execution in demonstrated Python and Ruby environments.
Record
- Researcher
- Paolo Gabriele Schiraldi
- Published by
- gabdevele
- Date
- Topic
- Injection
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Paolo Gabriele Schiraldi, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .