Multi-database exploitation framework for MSSQL, PostgreSQL, MySQL, and Oracle. RCE chains, non-destructive assessment, HawkEye auto-pentest integration.
Remote command execution via extended stored procedures. Automatic version detection and privilege escalation chains.
COPY FROM PROGRAM execution. File read/write via COPY TO, reverse shell generation, and data exfiltration.
Web shell upload to writable directories. Automatic web root detection and shell injection via INTO OUTFILE clause.
Java class execution RCE via DBMS_JAVA.RUNJAVA. System command execution and privilege escalation chains.
Vulnerability assessment without system modification. Safe exploration of attack paths and risk reporting.
Automatic service detection → attack module loading → non-destructive assessment → JSON reporting.