postgresql-cve-exploitation

Practical PostgreSQL CVE exploitation labs with documentation (ESP/ENG/RUS)

PostgreSQL CVE Exploitation

This repository contains hands-on labs demonstrating the exploitation of critical PostgreSQL vulnerabilities using containerized environments. Each lab includes detailed documentation covering setup, exploitation steps, results, and mitigation recommendations.

CVEs Covered

CVE ID	PostgreSQL Version	Description
CVE-2007-6601	8.2.5	Cross-database access via dblink
CVE-2018-10915	10.4	Unauthorized access with potential privilege escalation
CVE-2022-1552	14.2	Metadata exposure through the amcheck extension

Tools & Environment

• Docker & Docker Compose
• PostgreSQL vulnerable builds via pg_cve_demo
• Bash / PSQL CLI
• Markdown technical reporting

Structure

Each directory contains:

• exploit_steps_bilingual.md: Full walkthrough
• Screenshots

Author

Bruno Paolo Huamán Vela
Cybersecurity student at Ural Federal University (UrFU)
Specialization: Information Security in Telecommunication Systems