CASE STUDIES

Security findings grounded in real assessments.

A selection of authorized security assessment work demonstrating how weaknesses can be identified, documented, and validated in real digital environments.

CASE STUDY 001

MySQL Access Control Exposure

Network VAPT

An authorized network security assessment identified externally reachable MySQL service exposure and an overly broad firewall access control rule.

Assessment type: Authorized Network VAPT
Primary area: Network access control
Service assessed: MySQL
Assessment period: May 2026

FINDING

Broad network access to a database service

The assessment identified a MySQL service exposed through TCP port 3306 with a firewall access control rule allowing traffic from 0.0.0.0/0. This represented an unnecessarily broad network exposure for a database service.

RESPONSIBLE DISCLOSURE

Security work should be conducted with authorization and care.

Case studies are presented at a level appropriate for demonstrating security experience without exposing confidential client information or unnecessary technical details.