Database Security Assessment

ACTION REQUIRED (execute immediately after reading)

1. NOW: Read precedent-pentest；Produce库禁止破坏性语句 unless 明确Allow

2. NOW: scope write清实example、accountPermission、whetherAllowwrite/删

3. NEXT: 客户sideToolPath

4. ACT: Exposure surface → Authentication → Authorization → Configuration → Exploit chainVerification（Security）

Scope

• DatabasenotAuthorization/weakPassword/ErrorBinding 0.0.0.0

• Permission过大、dangerousfunctioncan（xp_cmdshell、COPY PROGRAM、UDF）

• Lateral：from应useaccountto DBA

• NoSQL Injectionand Redis writefileetc.（Authorization环境）

Workflow

□ NetworkExposureand TLS



□ accountRoleand grantee



□ sensitive表访问Control



□ dangerousConfiguration：file_priv、xp_cmdshell、load_file



□ AuditLogwhether开启



□ BackupandSnapshotPermission

Toolchain

| Tool | purpose |

|------|------|

| 官方 CLI | ConnectionandEnumerate |

| sqlmap | InjectionVerification（Authorization） |

| nuclei | alreadyknowExposureTemplates |

| cloud RDS Control台Audit | Configuration |

References

• references/db-misconfig-checklist.md

• ../pentest-tools/ ../cloud-k8s/

Routing context

Upstream: MASTER R35

Downstream: 获 OS command → attack-chain；cloud托管 → cloud-k8s

Task completion checklist

• whether避免notAuthorizationwrite删？

• whether区分ConfigurationIssueandcanExploit chain？

• Checklist？