the attacker makes an rds query which results in the comands run as shown below