Interesting Hack

From: Dave Morgan <oracle_at_1001111.com>
Date: Wed, 09 Jul 2014 18:32:56 -0600
Message-ID: <53BDDF38.6030509_at_1001111.com>

Granted the database security was crap to begin with but I did not know the escape to shell trick.

http://www.notsosecure.com/blog/2014/07/08/abusing-oracles-create-database-link-privilege-for-fun-and-profit/

Dave

--

Dave Morgan
Senior Consultant, 1001111 Alberta Limited dave.morgan_at_1001111.com
403 399 2442
--

http://www.freelists.org/webpage/oracle-l Received on Thu Jul 10 2014 - 02:32:56 CEST