// cybersecurity
Database Pentester Sidekick
Database Pentester Sidekick
Multi-database exploitation framework for MSSQL, PostgreSQL, MySQL, and Oracle. RCE chains, non-destructive assessment, HawkEye auto-pentest integration.
MSSQL xp_cmdshell
Remote command execution via extended stored procedures. Automatic version detection and privilege escalation chains.
PostgreSQL RCE
COPY FROM PROGRAM execution. File read/write via COPY TO, reverse shell generation, and data exfiltration.
MySQL INTO OUTFILE
Web shell upload to writable directories. Automatic web root detection and shell injection via INTO OUTFILE clause.
Oracle DBMS_JAVA
Java class execution RCE via DBMS_JAVA.RUNJAVA. System command execution and privilege escalation chains.
Non-Destructive Testing
Vulnerability assessment without system modification. Safe exploration of attack paths and risk reporting.
HawkEye Integration
Automatic service detection → attack module loading → non-destructive assessment → JSON reporting.