mysql-pentesting
Warn
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Mentions paths to sensitive local configuration files such as /etc/mysql/debian.cnf, ~/.my.cnf, and ~/.mylogin.cnf which may contain plaintext passwords.
- [REMOTE_CODE_EXECUTION]: Provides detailed procedures for loading malicious shared libraries (.so, .dll) via User Defined Functions (UDF) to achieve system-level execution. Also includes PoCs for CVE-2023-21971 (JDBC propertiesTransform RCE).
- [COMMAND_EXECUTION]: Guidance on executing arbitrary shell commands using the sys_exec UDF and the MySQL client escape command (! sh). Includes templates for reverse shells and persistence via cron jobs.
- [DATA_EXFILTRATION]: Details methods for exfiltrating data using DNS Out-of-Band (OOB) requests and setting up a Rogue MySQL Server to capture files from client machines using LOAD DATA LOCAL.
- [EXTERNAL_DOWNLOADS]: References external exploitation tools hosted on GitHub (e.g., allyshka/Rogue-MySql-Server, 4ra1n/mysql-fake-server) which are downloaded and executed.
- [PROMPT_INJECTION]: The skill possesses a high attack surface for indirect injection as it ingests untrusted data from network scans and database query results without explicit boundary markers or sanitization, while maintaining high-privilege capabilities like shell execution and file writing.
Audit Metadata