Database Extraction

Extract data from databases via SQL injection or authorized database tool access

Tactic

Collection · Stage 7

Gather and stage data from databases, file systems, and APIs

Attack class

CODE-INJECTION

Injecting and executing arbitrary code through SQL injection, command injection, or code generation

Evidence grade

Validated

Reproduced in a controlled lab environment (DVAA) with documented steps.

DVAA validation

DataBot SQL injection

Reproductions in Damn Vulnerable AI Agent, the OpenA2A intentionally-broken agent for kill-chain validation.

Honeypot

AgentPwn coverage

Out of scope

Not observable via content-side honeypot interaction. HackMyAgent or DVAA cover this where applicable.

Database extraction needs live DB tooling not present on the honeypot.

Detect

Live3 live · 1 queued

IO-001INJ-001INJ-002INJ-003

npx hackmyagent secure --ciLive = implemented in hackmyagent; queued = declared

Defend

Live4 live · 0 queued

Live = documented at oasb.ai; queued = declared

Reference

AI Agent Threat Matrix T-7002 (Database Extraction). OpenA2A, 2026. https://threats.opena2a.org/techniques/T-7002