SQLite database file repurposed as Linux executable via ELF schema in SQLite tables

Farid Zakaria describes a Linux-focused technique that turns a SQLite database file into a directly executable binary by encoding the ELF components as rows in SQLite tables. The method sets the SQLite file format’s 4-byte application ID—located 68 bytes into the file—to the string SELF, indicating a Structured Executable & Linkable Format payload.

The custom schema defines tables that map to ELF sections such as headers, program headers, and sections, allowing the SQLite file to mirror the structure of a traditional ELF executable. Zakaria provides a reference schema and a C-based interpreter called self-exec that reads the SQLite file, reconstructs the ELF components, and executes them.

To make the kernel recognize and run such files automatically, the approach leverages Linux’s binfmt_misc mechanism. By writing a registration string to /proc/sys/fs/binfmt_misc/register, the system can be configured to invoke self-exec whenever it encounters a file whose application ID matches SELF, enabling transparent execution of SQLite-based binaries.