Files
ITAM/analyze_remote_mess.cjs

30 lines
1.1 KiB
JavaScript

const mysql = require('mysql2/promise');
require('dotenv').config({ override: true });
(async () => {
const pool = mysql.createPool({
host: process.env.DB_HOST,
user: process.env.DB_USER,
password: process.env.DB_PASS,
database: process.env.DB_NAME,
port: parseInt(process.env.DB_PORT || '3306')
});
try {
// 1. PW 필드에 9~10자리 숫자(팀뷰어 ID 의심)가 있는 경우
const [rows1] = await pool.query("SELECT id, asset_id, net_name, net_value1, net_value2 FROM asset_remote WHERE net_value2 REGEXP '^[0-9]{9,10}$'");
console.log('--- Suspicious PW as ID ---');
console.log(JSON.stringify(rows1, null, 2));
// 2. REMOTE 타입인데 value1이 IP인 경우 (아까 확인한 거 포함)
const [rows2] = await pool.query("SELECT id, asset_id, net_name, net_value1, net_value2 FROM asset_remote WHERE net_type = 'REMOTE' AND net_value1 REGEXP '^[0-9]+\\\\.[0-9]+\\\\.[0-9]+\\\\.[0-9]+$'");
console.log('\n--- REMOTE with IP in val1 ---');
console.log(JSON.stringify(rows2, null, 2));
} catch (err) {
console.error(err);
} finally {
await pool.end();
}
})();