PostgreSQL

The offensive surface of PostgreSQL reached as a service: authenticating, executing operating-system commands through COPY FROM PROGRAM and untrusted procedural languages, reading and writing host files, and escalating to superuser.

1 ನಿಮಿಷದ ಓದುಅಕ್ಟೋ 7,2026 ರಂದು ನವೀಕರಿಸಲಾಗಿದೆflorianamette1 ಕೊಡುಗೆದಾರ
ನಿಮ್ಮ ಸಹಾಯಕವನ್ನು ಕೇಳಿ (MCP)GitHub ನಲ್ಲಿ ಸಂಪಾದಿಸಿ

PostgreSQL (port 5432) is a frequent target because, as a superuser, it will run operating-system commands and read or write arbitrary files on the host, all through documented features. Even as a non-superuser there are file and function primitives worth reaching for, and several well-known paths promote an ordinary role to superuser.

What to reach for#

  • Access: default and weak credentials, trust authentication, and reaching a login.
  • Command execution: COPY ... FROM PROGRAM, untrusted languages (plpythonu, plperlu), and C extensions.
  • File access: COPY, large objects, and pg_read_file to read and write host files.

References#

ಹಿಂದಿನದುCoercion and relayಮುಂದಿನದು Access