Collected research
Apache Pinot SQLi and RCE Cheat Sheet
A cheat sheet for injecting into Apache Pinot, an OLAP database whose Calcite-based SQL lacks UNION, stacked queries and information schema. Its OPTION(...) clause is stripped from anywhere in a query, even inside strings, giving filter and WAF bypasses, and an injected GROOVY() call runs shell commands as root on Pinot servers, then pivots to Zookeeper and brokers.
Record
- Researcher
- Ben Caller
- Published by
- blog.doyensec.com
- Topic
- Injection
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Ben Caller, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .