database-security

> ⚠️ AUTHORIZED USE ONLY

> This skill is for educational purposes or authorized security assessments only.

> You must have explicit, written permission from the system owner before using this tool.

> Misuse of this tool is illegal and strictly prohibited.

> Mandatory confirmation gate

> Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:

> 1. Ask the user to state the exact target URL, IP, account, or resource.

> 2. Ask the user to confirm written authorization and the permitted scope.

> 3. Show the exact command(s) and explain their expected effect.

> 4. Wait for explicit confirmation in the current conversation.

>

> Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.

Database Security Assessment

When to Use

• Assessing database hardening and exposure within an approved scope.
• Checking authz boundaries and risky server-side execution features.

适用场景

• 数据库未授权/弱口令/错误绑定 0.0.0.0
• 权限过大、危险功能（xp_cmdshell、COPY PROGRAM、UDF）
• 横向：从应用账号到 DBA
• NoSQL 注入与 Redis 写文件等（授权环境）

工作流

□ 网络暴露与 TLS
□ 账号角色与 grantee
□ 敏感表访问控制
□ 危险配置：file_priv、xp_cmdshell、load_file
□ 审计日志是否开启
□ 备份与快照权限

工具链

| 工具 | 用途 |

|------|------|

| 官方 CLI | 连接与枚举 |

| sqlmap | 注入验证（授权） |

| nuclei | 已知暴露模板 |

| 云 RDS 控制台审计 | 配置 |

参考

• references/db-misconfig-checklist.md
• ../pentest-tools/ ../cloud-k8s/

路由上下文

上游: MASTER R35

下游: 获 OS 命令 → attack-chain；云托管 → cloud-k8s

任务完成自检

• [ ] 是否避免未授权写删？
• [ ] 是否区分配置问题与可利用链？
• [ ] Checklist？

Limitations

• Never run against production data stores without explicit written approval.
• Active exploitation paths (UDF/command exec) are destructive-capable; simulate first.

> Adapted from zhaoxuya520/reverse-skill (MIT).