[Previous entry: "The right way to secure Oracle slides available"] [Next entry: "Bypassing VPD through inference"]
Hacking Oracle made easy
July 24th, 2009 by Pete
Post to del.icio.us
Post to Furl
Chris Gates will release and demonstrate a new version of metaploit at Black Hat to show how Oracle can be attacked and hacked remotely. The presentation will be followed by the release of this version of Metasploit. Chris Gates demonstrated some of the ideas in February and he posted a video about this at that time - i mentioned it here at the time also.
The tool automates the attack against Oracle by first brute forcing/guessing the SID, then username/password and then by running various exploits.
There is a nice article also on Reuters talking about the presentation called "Hacking Oracle's database will soon get easier"
July 24th, 2009 at 03:31 pm
CG says:
its actually just some auxiliary modules not a new version of metasploit.