Skip to content
cccskills
FreePublished on GitHub

database-security

Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.

The English summary is being prepared. Showing the original description.

See how to install

Files included (2)

  • SKILL.md979 B
  • references/db-misconfig-checklist.md234 B

SKILL.md (original)

Review the instructions the agent will receive before you install.

Database Security Assessment

适用场景

  • 数据库未授权/弱口令/错误绑定 0.0.0.0
  • 权限过大、危险功能(xp_cmdshell、COPY PROGRAM、UDF)
  • 横向:从应用账号到 DBA
  • NoSQL 注入与 Redis 写文件等(授权环境)

工作流

□ 网络暴露与 TLS
□ 账号角色与 grantee
□ 敏感表访问控制
□ 危险配置:file_priv、xp_cmdshell、load_file
□ 审计日志是否开启
□ 备份与快照权限

工具链

工具用途
官方 CLI连接与枚举
sqlmap注入验证(授权)
nuclei已知暴露模板
云 RDS 控制台审计配置

参考

  • references/db-misconfig-checklist.md
  • ../pentest-tools/ ../cloud-k8s/

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Train and optimize AI agents using Microsoft's Agent Lightning framework with reinforcement learning. Use when setting up agent training, instrumenting agents with tracing, configuring LightningStore, implementing reward functions, or optimizing prompts with RL/APO algorithms.

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

Post-run self-evaluation system that scores agent output on correctness, clarity, actionability, and conciseness. Use after /team runs, skill executions, or when explicitly asked to evaluate output quality.

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

Create AI marketing videos for ads, promos, product launches, and brand content. Models: Veo, Seedance, Wan, FLUX for visuals, Kokoro for voiceover. Types: product demos, testimonials, explainers, social ads, brand videos. Use for: Facebook ads, YouTube ads, product launches, brand awareness. Triggers: marketing video, ad video, promo video, commercial, brand video, product video, explainer video, ad creative, video ad, facebook ad video, youtube ad, instagram ad, tiktok ad, promotional video, launch video

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

Use when building AI features into a product: LLM integration, RAG pipelines, guardrails, streaming, AI UX, prompt engineering, or AI cost control. Treats prompts as code and validates every model output.

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

Your AI research and engineering brain trust. 59 named personas across 8 cells covering frontier labs, applied product, model architecture, reasoning/RL/agents, alignment and interpretability, theory and science of DL, multimodal and…

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

Use when designing a new REST or GraphQL API, reviewing an API spec before implementation, setting team API standards, or migrating REST to GraphQL. Covers resources, HTTP semantics, pagination, error handling, and pitfalls.

The English summary is being prepared. Showing the original description.

coco-research/coco743Updated Oct 18, 2026

See all skills by coco-research

Report a problem with this skill