GaussDB Database Review
by Walkthrough of the checks for a security review of a GaussDB database.
Category: Database
1433 – MSSQL – TCP
Various notes ranging from enumeration to building reverse shells for exploiting Microsoft SQL Server, MSSQL.
MySQL – 3306 – TCP
Common Commands Interesting Files Encoding Create, Read, or Update Files SQL Injection Payloads Basic Version Name from __Auth Collation Name Column Names Name and Reset Token Code Review Searching sucks in JD-GUI, so save the decompiled code for Notepad++. In JD-GUI, File > Save All Sources menu. Then open Notepad++ and use the ‘Find in […]
PostgreSQL – 5432 – TCP
Login into postgres -U user-h host-d database \l – list databases\c [DataNase Name] – connect to database\dt – list datatables\q – quit/exit program\du – list users List of roles Role name Attributes postgres Superuser, Create role, Create DB, Replication, Bypass RLS webapp Superuser SELECT current_setting(‘is_superuser’); Auth Trust Open the file […]