 |
THE ART OF EXPLOITATION |
Oracle Security Tools (GUI)
I'm not going to describe it in details, hope you’ll test it yourselves. Here are the basic features:
Choose the needed exploit and double-click on it. In the appeared window, enter login, password and SID, press "Connect", and then press "Next"
Then choose the Roles and Privileges and press "Exploit"
If everything goes successfully, the status of connection and the existing roles and privileges of this account will appear. If you already have the necessary privileges, you can simply log on. Click the right mouse button on the status of connections list, and choose “Connect to DB.
The penetration to the OS and execution of DOS commands as root.
The privileges escalation in the OS. Creating a user as root and with the rights of remote connection.
Checking the validity of the Oracle users’ default passwords.
Checking the account compliance test of login=password.
|
|
