database-lateral-pivot
Audited by Socket on Oct 11, 2026
3 alerts found:
MalwareSecurityx2MALICIOUS。该技能的 stated purpose 就是数据库横向移动、内网探测、RCE、持久化与绕过 ACL,实际能力与之完全一致,但这一本身对 AI 代理而言是高危攻击能力,不属于普通开发或管理工作流。未见第三方安装器或凭据转发到外部 SaaS,但技能教授利用数据库内置能力进行横向渗透、命令执行和反弹 shell,应按高风险恶意/攻击性技能处理。
The fragment is an explicitly dual-use but strongly offensive database lateral-movement and exploitation guide. It contains actionable examples for credential discovery, internal port probing, remote data access, and operating-system command execution, including a reverse shell. It does not itself execute these actions because it is instructional text, so malware presence in the fragment is unlikely; its use against unauthorized systems poses substantial security risk.
No malware behavior is implemented in this fragment because it contains only static evaluation/attack-instruction text. However, the instructions are highly actionable for database-based lateral movement and internal probing (dblink pivoting, linked-server enumeration, remote querying, and scanning-like behavior). This is a significant misuse risk if distributed as part of a toolchain or executed by an automation layer elsewhere.