database-security
ZHFind exposure and privilege gaps in your databases.
What it does
Assesses authorized database instances for exposure, excessive privileges, dangerous features, and configuration weaknesses.
When to use it
Use for unauthorized access, weak passwords, unsafe network bindings, excessive privileges, dangerous database features, privilege escalation, or authorized NoSQL and Redis assessments.
How to use it
Give it a database instance and the authorized scope; it returns an assessment of exposure, authentication, authorization, configuration, and safely validated exploit chains.
What you provide
- the database instance
- account permissions
- write and delete authorization
What you need · 4
Requires a database instance within the assessment scope, with account permissions and permission to write or delete explicitly defined.
Requires reading precedent-pentest before proceeding with the assessment.
Routes work to attack-chain when OS command execution is obtained; whether that skill is required to complete the assessment is unstated.
Access · 1
This skill
database instance
Inspects database security settings