domains / families / security / database-security

database-security

authentic

Authorized database security assessment across PostgreSQL, MySQL, MSSQL, MongoDB, and Redis: exposure, authorization gaps, UDF/command execution paths, and misconfiguration review.

When to use

• Assessing database hardening and exposure within an approved scope.
• Checking authz boundaries and risky server-side execution features.

When not to use

• Never run against production data stores without explicit written approval.
• Active exploitation paths (UDF/command exec) are destructive-capable; simulate first.

Skill page

Source