Python Sample SQLite - Revision history

Sam: /* Exploiting All SQLite Files in Truxton */

2024-09-11T20:46:25Z

Exploiting All SQLite Files in Truxton

Sam: /* Querying All SQLite Files in Truxton */

2024-03-01T11:20:05Z

Querying All SQLite Files in Truxton

Sam at 11:19, 1 March 2024

2024-03-01T11:19:01Z

Sam: /* APSW */

2024-03-01T09:45:49Z

APSW

Sam at 14:14, 24 February 2024

2024-02-24T14:14:06Z

Sam at 12:38, 19 February 2024

2024-02-19T12:38:03Z

Sam: Created page with "It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them. =APSW= Truxton will automatically create a unique identifier for your fil..."

2024-02-19T12:24:23Z

Created page with "It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them. =APSW= Truxton will automatically create a unique identifier for your fil..."

New page

It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them.

=APSW=
Truxton will automatically create a unique identifier for your file type.
This is not recommended as the value is random which will make it difficult to share with other exploitation programs.

<source lang="python">
import sys
sys.path.append('C:/Program Files/Truxton/SDK')
import truxton

def main() -> None:

return None

if __name__ == "__main__":
sys.exit(main())
</source>

=Predefined Value=
If you have carefully chosen a integer value for your new file type, you can specify it when you register the other details.

@@ Line 167: / Line 167: @@
 # Notice that we keep the database parameter typeless
 # This is so we can use the same function with an APSW Connection or a splite3 cursor.
-# The exploitation code doesn't know not care which SQLite technology is used.
+# The exploitation code doesn't know nor care which SQLite technology is used.
 def exploit_speed_test_database( database ) -> None:
   for row in database.execute("SELECT [ZDATE],[ZLATITUDE],[ZLONGITUDE],[ZALTITUDE],[ZWIFISSID] FROM [ZSPEEDTESTRESULT]"):

@@ Line 152: / Line 152: @@
 </source>
-=Querying All SQLite Files in Truxton=
+=Exploiting All SQLite Files in Truxton=
 Using [[TruxtonEnumeration|enumeration]], we can find all files of a particular type and query them without ever having to write to a file.
 This is the <code>AllSpeedTestDatabases.py</code> sample found here.

@@ Line 1: / Line 1: @@
 It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them to your local system.
 =APSW=
@@ Line 32: / Line 38: @@
 =SQLite in Truxton=
 Here's a script to query a SQLite database that is stored in Truxton.
 <source lang="python">
@@ Line 47: / Line 55: @@
    truxton_virtual_filesystem = TruxtonVFS()
    truxton_virtual_filesystem.Truxton = truxton.create()
-−
    database = apsw.Connection( "65d9d912-7328-d2e7-d511-f909000000c6", flags = SQLITE_OPEN_READONLY, vfs = "truxton")
@@ Line 141: / Line 150: @@
 if __name__ == "__main__":
    sys.exit(main())
 </source>

@@ Line 12: / Line 12: @@
 You can verify that it is working by running the following script:
 <source lang="python">
 import sys
 import apsw
 import apsw.ext
 def main() -> None:

@@ Line 1: / Line 1: @@
-It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them.
+It is possible to access [https://sqlite.org/ SQLite] files in Truxton without first exporting them to your local system.
 =APSW=
-Since the [https://docs.python.org/3/library/sqlite3.html Python DB-API] only supports establishing a connection to a SQLite database by providing a file name, we have to create our own filesystem to read from the data in Truxton.
+Since the [https://docs.python.org/3/library/sqlite3.html Python DB-API] only supports establishing a connection to a SQLite database by providing a file name, we have to create our own filesystem to read from the file in Truxton.
-But, DB-API doesn't support virtual filesystems.
+SQLite has the concept of virtual filesystems but DB-API doesn't support it.
 However, another SQLite library called [https://rogerbinns.github.io/apsw/ APSW] does.
 Install it using pip:
@@ Line 12: / Line 12: @@
 You can verify that it is working by running the following script:
 <source lang="python">
 import os
 import sys
@@ Line 38: / Line 35: @@
 </source>
-=Truxton=
+=SQLite in Truxton=
 <source lang="python">
 import sys
 sys.path.append('C:/Program Files/Truxton/SDK')
 import truxton
 def main() -> None:
    return None
 if __name__ == "__main__":
    sys.exit(main())
 </source>