Call: +44 (0)7759 277220 Call
Blog

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

Home » Archives » December 2006 » A free PL/SQL fuzzing tool released

[Previous entry: "10.2.0.3 for Linux and Windows is out"] [Next entry: "Pete Finnigan's Oracle Security Masterclass UKOUG 2006 available"]

A free PL/SQL fuzzing tool released

December 7th, 2006 by Pete


A free PL/SQL fuzzing tool written in python has just been released on the Full Disclosure list and bugtraq lists. The post titled "Oracle PL/SQL Fuzzing Tool" describes a python tool released under the GPL that will form part of a bigger Oracle specific vulnerability assessment tool that the author will release. The post includes the python script.

I have not tested it as I dont have python installed on my laptop. I will test it. The tool looks fairly simple and should be easy to extend. Quite obviously it should not be run on a production database as it can cause crashes and potentially change data. You need a database account with at least CREATE SESSION and connect info to use it.

I have added the tool to my "Oracle security tools page"

  • PFCLScan

    Simply connect PFCLScan to your Oracle database and it will automatically discover the security issues that could make your Oracle database vulnerable to attack and to the potential loss of your data.

  • PFCL Obfuscate PFCLObfuscate

    PFCLObfuscate is the only tool available that can automatically add license controls to your PL/SQL code. PFCLObfuscate protects your Intellectual Property invested in your PL/SQL database code.

  • PFCL Training PFCLTraining

    PFCLTraining is a set of expert training classes for you, aimed at teaching how to audit your own Oracle database, design audit trails, secure code in PL/SQL and secure and lock down your Oracle database.

  • PFCL Services PFCLServices

    Choose PFCLServices to add PeteFinnigan.com Ltd to your team for your Oracle Security needs. We are experts in performing detailed security audits, data security design work and policy creation