Here is a quick bash script to wrap sqlplus for some brute forcing if for whatever reason nmap is failing to get the job done...and thus met...

Part II of the articles based on my Hacking Oracle Web Applications talk was posted on EthicalHacker.net today. Head over there to check it ...

Here's my Attacking Oracle with Metasploit Blackhat USA 2009 talk Attacking Oracle with the Metasploit Framework BH USA 2009 from carna...

MC recently added some recent Oracle SQLI exploits by Sh2kerr of Digital Security Research Group which is a great site if you are into Orac...

Metasploit Auxiliary module for Oracle FTP Script Write/Binary Download/Execute via Oracle Packages. As DBA (yea for SQLI) we use UTL_FILE t...

Here is the video from my Attacking Oracle with the Metasploit Framework ShmooCon Firetalk. Attacking Oracle with the Metasploit Framework S...

I recently pushed out (again with MC's) help an Oracle Sid enumeration MSF auxiliary module for Oracle versions less than Oracle 10g Rel...

Thanks to help from MC, I pushed out a oracle_version scanner module today for MSF that uses MC's TNS mixin. here it is in action: msf ...

In some of the past posts I covered finding a user default user account or account with an easy to guess username/password for Oracle and ta...

Thanks to dentonj for pointing out to me their was an Oracle patch for John the Ripper. I used the john from this site: http://www.banquise....

Thank MC for this one... http://metasploit.com/users/mc/oracle9i/brute_login.rb msf > use auxiliary/admin/oracle/brute_login msf auxiliar...

Sorry no metasploit for this one. But I did get asked how to get the SCOTT/TIGER username and pass. I left a (hint) in the first blog post....

Last post we got to where we could execute SQL queries on the box and were able to see Scott's permissions. Let's use the SQLI auxil...

Every so often you come across an open 1521 on a pentest. 1521/tcp open oracle But what to do? There aren't a ton of what I conside...

doing a little bit of playing with tnscmd.pl on oracle cg@segfault:~/evil/scanners$ perl tnscmd.pl version -h 192.168.0.242 --indent sending...