Oracle exploit for CTXSYS.DRVXTABC.CREATE_TABLES and others
2009-12-01 09:37
891 查看
Hi!
I've just released the working exploit for CTXSYS.DRVXTABC.CREATE_TABLES
injection on Oracle DB 9i/10g (CVE-2009-1991)
You can find the code on my site, http://rawlab.mindcreations.com
In particular,
Classic SQL injection:
http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tables.sql
Cursor injection:
http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tablesV2.sql
Into the site you can find exploits for COMPRESSWORKSPACETREE,
REMOVEWORKSPACE and MERGEWORKSPACE injections (SYS.LT) too.
Regards,
--
Andrea "bunker" Purificato
Ethical Hacker @ Unidata S.p.A.
http://rawlab.mindcreations.com
http://packetstormsecurity.org/0911-exploits/sys-lt-mergeworkspaceV2.sql.txt
http://packetstormsecurity.org/0911-exploits/sys-lt-removeworkspaceV2.sql.txt
http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tablesV2.sql.txt
http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tables.sql.txt
http://packetstormsecurity.org/0911-exploits/sys-lt-compressworkspacetreeV2.sql.txt
I've just released the working exploit for CTXSYS.DRVXTABC.CREATE_TABLES
injection on Oracle DB 9i/10g (CVE-2009-1991)
You can find the code on my site, http://rawlab.mindcreations.com
In particular,
Classic SQL injection:
http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tables.sql
Cursor injection:
http://rawlab.mindcreations.com/codes/exploit/oracle/ctxsys-drvxtabc-create_tablesV2.sql
Into the site you can find exploits for COMPRESSWORKSPACETREE,
REMOVEWORKSPACE and MERGEWORKSPACE injections (SYS.LT) too.
Regards,
--
Andrea "bunker" Purificato
Ethical Hacker @ Unidata S.p.A.
http://rawlab.mindcreations.com
http://packetstormsecurity.org/0911-exploits/sys-lt-mergeworkspaceV2.sql.txt
http://packetstormsecurity.org/0911-exploits/sys-lt-removeworkspaceV2.sql.txt
http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tablesV2.sql.txt
http://packetstormsecurity.org/0911-exploits/ctxsys-drvxtabc-create_tables.sql.txt
http://packetstormsecurity.org/0911-exploits/sys-lt-compressworkspacetreeV2.sql.txt
相关文章推荐
- Map Columns From Different Tables and Create Insert and Update Statements in Oracle Forms
- How to reduce number of records on CTXSYS.DR$WAITING,CTXSYS.DR$PENDING tables in Oracle EBS?
- 【Oracle问题集5】ORA-55622: DML, ALTER and CREATE UNIQUE INDEX operations are not allowed on table
- to create table if table do not exist -- to backup and restore table in oracle
- What is the HINSTANCE passed to CreateWindow and RegisterClass used for?
- How to setup linked servers for SQL Server and Oracle 64 bit client
- Create country table and insert all the countries script for SQL Server
- ★ Learn how you can use Adobe Creative Suite to create skins for Flex and AIR applications.
- Comparing the Microsoft .NET Framework 1.1 Data Provider for Oracle and the Oracle Data Provider for .NET
- Pluggable Authentication Modules: The Definitive Guide to PAM for Linux SysAdmins and C Developers
- HTTP Status 404 - No result defined for action com.cnlive.csp.manage.action.SysGiftAction and result
- How to Determine the Version of Oracle XML Publisher for Oracle E-Business Suite 11i and Release 12 (Doc ID 362496.1)
- create encode function and decode function for using
- Create Custom Modal Dialog Windows For User Input In Oracle Forms
- Pre-Update and Pre-Insert Trigger Examples For Oracle Forms
- Cannot create JDBC driver of class 'oracle.jdbc.driver.OracleDriver' for connect URL ****
- Database Patch Set Update Overlay Patches Required for Use with PSUs and Oracle E-Business Suite
- Security Configuration and Auditing Scripts for Oracle E-Business Suite (文档 ID 2069190.1)
- 122.View the Exhibit for the structure of the STUDENT and FACULTY tables.
- What is Favicon.ico and How to Create a Favicon Icon for Your Website?[zz]