# Sql web shell upload

**URL:** <https://onehack.st/t/sql-web-shell-upload/164505>\
**Category:** Discussion & Solutions\
**Tags:** solved\
**Created:** [December 1, 2020, 8:45am UTC](https://onehack.st/t/sql-web-shell-upload/164505 "2020-12-01T08:45:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mafialive](https://onehack.st/user_avatar/onehack.st/mafialive/32/33196_2.png) [@mafialive](https://onehack.st/u/mafialive)\
**Post date:** [December 1, 2020, 8:45am UTC](https://onehack.st/t/sql-web-shell-upload/164505/1 "2020-12-01T08:45:51Z")

</div>

hello,

i am learning hacking with the support of 1hack forum thanks a lot. I have a problem. If i have access to my local server via sqlmap. able to dump database. But i unable to upload os shell/web shell becuase i have only user priv = usage, disable the others priv. i have found some hackers also upload webshell to server without file read/write priv. how can they do that. is any premade script on github or something else. it will be helpful to understand process. also it will be helpful to learn the hacking skills more.

---

<div class="post-metadata">

**Author:** ![DementedZandra](https://onehack.st/user_avatar/onehack.st/dementedzandra/32/87704_2.png) [@DementedZandra](https://onehack.st/u/DementedZandra)\
**Post date:** [May 21, 2021, 6:48am UTC](https://onehack.st/t/sql-web-shell-upload/164505/2 "2021-05-21T06:48:42Z")

</div>

hey perhaps this might help you.

[https://null-byte.wonderhowto.com/how-to/use-sql-injection-run-os-commands-get-shell-0191405/](https://null-byte.wonderhowto.com/how-to/use-sql-injection-run-os-commands-get-shell-0191405/)

They seem to use reverse shell with netcat.