mysql-pentesting

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). Both GitHub repositories are offensive tools (a Java "mysql-fake-server" and a Python "Rogue-MySql-Server") explicitly designed to perform Rogue MySQL Server attacks (client file theft and potential RCE), so they are high-risk sources that can be used to distribute malware or facilitate exploitation.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The content is an explicit offensive MySQL exploitation guide providing step-by-step instructions for data exfiltration, credential theft, remote code execution (UDF/JDBC), persistence (webshells, cron, authorized_keys, .pth), and rogue-server attacks — clearly enabling malicious activity.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 1.00). Flagged because the skill contains explicit instructions to modify system files (webshells, /root/.ssh/authorized_keys, /etc/cron.d), create user accounts (net user ... /add), load UDFs to execute arbitrary system commands, and spawn shells — all actions that change the host state and can require/assume elevated privileges.