Post Connection Attacks in MySQL

Abstract

This article covers the default security features of MySQL, a very popular open-source database management system, and what types of attacks an attacker can perform after successfully connecting to a database. In this context, it introduces Zephyr, a platform we developed, which automatically performs the types of scanning and attacks caused by incorrect or incomplete security configurations. We demonstrate an analysis of the security of MySQL usage in Turkey over Zephyr.