Individual skill
postgresql-pentesting
PostgreSQL 数据库服务(5432 端口)渗透测试方法论。涵盖 PostgreSQL 服务发现、默认凭据测试、数据库枚举、文件读写(COPY/lo_import)、命令执行(RCE via UDF/扩展)、权限提升、已知漏洞利用。 当 Agent 扫描发现 5432 端口开放、需要测试 PostgreSQL 认证、通过数据库实现文件读写或命令执行时,触发此 Skill。
skills/exploit/network-service/postgresql-pentesting/SKILL.md
Source commit c0d3a4645f26be5b94f64344b501db4191dc9788
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Network or broad shell
- Last checked
- Nov 9, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,905
- Repository last updated
- Oct 24, 2026
- License
- Not available
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- payload Repository topic
- security Repository topic
- dictionary Repository topic
- fuzz Repository topic
- pentest Repository topic
- hacking Repository topic
- redteam Repository topic
- bounty Repository topic
- cheatsheet Repository topic
- bypass Repository topic
- postgresql,postgres,数据库,5432端口,rce,文件读写,copy命令 Declared skill tag
- engineering Derived category
- data Derived category
- data-databases Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
No licensed excerpt is available. You can inspect the pinned source.