by zhaoxuya520cab634bd855fNo license40K starsListed Oct 9, 2026Updated Oct 9, 2026Repository updated 2 weeks ago
Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
Guides authorized database security assessment across PostgreSQL, MySQL, MSSQL, Mongo and Redis, covering exposure, authz and misconfiguration.
NOW: 读取 precedent-pentest；生产库禁止破坏性语句 unless 明确允许NOW: scope 写清实例、账号权限、是否允许写/删NEXT: 客户端工具路径ACT: 暴露面 → 认证 → 授权 → 配置 → 利用链验证（安全）references/db-misconfig-checklist.md../pentest-tools/ ../cloud-k8s/上游: MASTER R35
下游: 获 OS 命令 → attack-chain；云托管 → cloud-k8s
Source:zhaoxuya520/reverse-skillinskills/database-securityat commitcab634b
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
zhaoxuya520
Guides authorized Android and iOS app reverse engineering and security testing, from static analysis to runtime instrumentation.
zhaoxuya520
Guides reverse engineering of JavaScript-based custom DSL/VM interpreters, opcode dispatchers and risk-control engines.
zhaoxuya520
Guides authorized Active Directory and Windows identity attack research, from enumeration to Kerberos, AD CS and relay paths.
zhaoxuya520
Guides authorized security testing of desktop thick clients across local storage, IPC, traffic, and update channels.
zhaoxuya520
Guides authorized OSINT and cyber threat intelligence work, enriching IOCs and campaigns from public sources with corroboration and evidence handoff.
zhaoxuya520
Guides blue-team threat hunting and detection engineering with hypotheses, SIEM queries, Sigma/YARA rules and validation.
anthropics
Applies a firm's KYC/AML rules grid to a parsed onboarding record, scoring risk and routing outcomes.
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.
□ 网络暴露与 TLS□ 账号角色与 grantee□ 敏感表访问控制□ 危险配置：file_priv、xp_cmdshell、load_file□ 审计日志是否开启□ 备份与快照权限