Database vulnerability scanning¶

Key tests:

• SQL injection vulnerabilities

• Excessive permissions

• Unencrypted sensitive data

• Default/weak credentials

Tools:

• SQLMap

• DbProtect

• Native database scanners (MySQL Enterprise Audit)