Hacktron CLI AI-assisted audit of JDBC drivers finds file read/write and RCE chain in Databricks, file read in Exasol; $85K in bounties
Researcher Harsh Jaiswal of Hacktron describes using the AI-assisted Hacktron CLI with a custom "JDBC driver pack" to audit decompiled JDBC drivers during a bug bounty event. The audit surfaced multiple vulnerabilities across vendor drivers, earning $85,000 in bounties. The headline finding is in the Databricks JDBC driver, where an attac…