Penetration Testing mailing list archives
RE: Pen Testing a Oracle database. How to pull data?
From: "Aaron C. Newman" <aaron () newman-family com>
Date: Tue, 26 Jun 2001 11:26:18 -0400
Pretty simple from there. There is probably an account called oracle that is the software owner. su - oracle cd $ORACLE_HOME/bin ./svrmgrl connect / as sysdba spool results.log select * from dba_users; /*perform any other sql statements you would like now*/ /*to find the actual location of the database files run the following sql statement*/ select * from dba_data_files; Aaron C. Newman CTO/Founder Application Security, Inc. 212-490-6022 anewman () appsecinc com www.appsecinc.com -Protection Where It Counts- -----Original Message----- From: pen-test-return-405-aaron=newman-family.com () securityfocus com [mailto:pen-test-return-405-aaron=newman-family.com () securityfocus com]On Behalf Of Osvaldo J . Filho Sent: Monday, June 25, 2001 6:21 PM To: pen-test () securityfocus com Subject: Pen Testing a Oracle database. How to pull data? Hello, I am currently pen testing a DB server running Oracle. I already got root on it, and I would like a lil' help to gather info on human readable format. Is there a specific file/dir where all DB data are? How can I get/convert it to Human Readable or even edit the data without any external programs like SQLNet? The server is running AIX. Any help is appreciated. Thank you very much. Osvaldo J. Filho osvaldojaneri () uol com br -------------------------------------------------------------------------------------- This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service For more information on SecurityFocus' SIA service which automatically alerts you to the latest security vulnerabilities please see: https://alerts.securityfocus.com/
Current thread:
- pen testing iis 5 ExpLiciT (Jun 21)
- Re: pen testing iis suntzu (Jun 24)
- Re: pen testing iis Enrique A. Sanchez Montellano (Jun 27)
- Re: pen testing iis Javier Fernandez-Sanguino Peña (Jun 28)
- Re: pen testing iis Enrique A. Sanchez Montellano (Jun 27)
- Re: pen testing iis 5 Javier Fernandez-Sanguino Peña (Jun 27)
- <Possible follow-ups>
- Re: pen testing iis 5 Stephen Friedl (Jun 22)
- Re: pen testing iis 5 Reverend Lola (Jun 22)
- RE: pen testing iis 5 dilbert96 (Jun 24)
- RE: pen testing iis 5 st0ff st0ff (Jun 25)
- Pen Testing a Oracle database. How to pull data? Osvaldo J . Filho (Jun 26)
- RE: Pen Testing a Oracle database. How to pull data? Aaron C. Newman (Jun 26)
- RE: Pen Testing a Oracle database. How to pull data? George Milliken (Jun 26)
- Pen Testing a Oracle database. How to pull data? Osvaldo J . Filho (Jun 26)
- Re: pen testing iis suntzu (Jun 24)