Nmap Development mailing list archives
[NSE] New script oracle-query
From: Patrik Karlsson <patrik () cqure net>
Date: Wed, 10 Aug 2011 23:14:03 +0200
Hi list, Here's the first script that makes use of the new Oracle query support in the TNS library. The script (oracle-query), as the name suggests, allows you to run queries against the oracle database. If no query is supplied it queries the database for a banner with version information. In order to test the script you need to have valid database credentials and the name of the instance to run it against. I would appreciate *A LOT* if people that do have access to Oracle help out testing it as the implementation is mostly based on guesswork. You can run the script like this: nmap -p 1521 <ip> --script oracle-query --script-args "oracle-query.sid=ORCL,creds.oracle='system:manager',oracle-query.query='SELECT * FROM all_users'" Cheers, Patrik
Attachment:
oracle-query.nse
Description:
-- Patrik Karlsson http://www.cqure.net http://www.twitter.com/nevdull77
_______________________________________________ Sent through the nmap-dev mailing list http://cgi.insecure.org/mailman/listinfo/nmap-dev Archived at http://seclists.org/nmap-dev/
Current thread:
- [NSE] New script oracle-query Patrik Karlsson (Aug 10)