Tags: web sqlite_web 

Rating:

tl;dr

* Create a sqlite3 extension with rce payload.
* Abuse werkzeug tempfile to upload the extension to server.
* load that extension using load_extension(‘/proc/self/fd/fd_no’);

Original writeup (https://blog.bi0s.in/2023/03/14/Web/Sqlite_web_hxpctf22/).