maverick/postgres-mitm
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add test steps to readme

Browse source
This commit is contained in:
Tarjei Husøy 2016-05-30 08:30:48 -07:00
parent a2a19616fc
commit c826681aee
1 changed files with 12 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
README.md
View file

@ -1,2 +1,13 @@
# postgres-mitm # postgres-mitm
Test whether your Postgres connections are vulnerable to MitM attacks
Test whether your Postgres connections are vulnerable to MitM attacks.
## Steps to test your exposure
* Run the script with the IP of the database you want to impersonate:
`postgres_mitm.py <IP of actual database>`
* Replace your database hostname with the IP of the machine running the script
* See if your app works.
If your app successfully connects to the database, it didn't validate certficates and accepted whatever was presented. The credentials for the database will be printed by the script. If you're seeing connection errors that's good, and means you're probably not vulnerable.