I recently pushed out (again with MC's) help an Oracle Sid enumeration MSF auxiliary module for Oracle versions less than Oracle 10g Rel...

Thanks to help from MC, I pushed out a oracle_version scanner module today for MSF that uses MC's TNS mixin. here it is in action: msf ...

In some of the past posts I covered finding a user default user account or account with an easy to guess username/password for Oracle and ta...

So this has been an interesting week. Lots of new botnets to dig around in, a bunch of new malware sites making a new effort to obfuscate th...

Thanks to dentonj for pointing out to me their was an Oracle patch for John the Ripper. I used the john from this site: http://www.banquise....

Thank MC for this one... http://metasploit.com/users/mc/oracle9i/brute_login.rb msf > use auxiliary/admin/oracle/brute_login msf auxiliar...

Sorry no metasploit for this one. But I did get asked how to get the SCOTT/TIGER username and pass. I left a (hint) in the first blog post....

Last post we got to where we could execute SQL queries on the box and were able to see Scott's permissions. Let's use the SQLI auxil...

Every so often you come across an open 1521 on a pentest. 1521/tcp open oracle But what to do? There aren't a ton of what I conside...

Good blog post over at securiteam on using the exe2vba portion of metasploit to embed malicious code into office documents. Fun! http://bl...

Some analysis on 2.exe. 2.exe : Not detected by Sandbox (Signature: NO_VIRUS) [ DetectionInfo ] * Sandbox name: NO_MALWARE * Signature n...

The first week of your new job is normally for finding your desk, getting email set up, finding the best place to grab coffee and snacks. W...

now that's just friggin sweet... http://blog.eonsec.com/2008/02/reliable-root-since-2006.html