SQLite Pentesting
Last modified: 2024-10-03
SQLite is a database engine.
Interpreter
sqlite3 sample.db
sqlite3 sample.sqlite
sqlitebrowser sample.db
Commands
# Help
sqlite> .help
# Show databases
sqlite> .databases
# Show tables
sqlite> .tables
# Show table information
sqlite> PRAGMA table_info(table_name);
# Dump contents of tables
sqlite> .dump <table>
# SQL commands to display values in the table
sqlite> SELECT * FROM <table>;
# Display values in Hex
sqlite> SELECT HEX(column_name) FROM <table>;
# Exit the interpreter
sqlite> .quit