[NSE] New script oracle-query

[Patrik Karlsson <patrik () cqure net>]

Hi list,

Here's the first script that makes use of the new Oracle query support in the TNS library.
The script (oracle-query), as the name suggests, allows you to run queries against the oracle database.
If no query is supplied it queries the database for a banner with version information.
In order to test the script you need to have valid database credentials and the name of the instance to run it against.
I would appreciate *A LOT* if people that do have access to Oracle help out testing it as the implementation is mostly 
based on guesswork.

You can run the script like this:
nmap -p 1521 <ip> --script oracle-query --script-args 
"oracle-query.sid=ORCL,creds.oracle='system:manager',oracle-query.query='SELECT * FROM all_users'"

Cheers,
Patrik

Attachment: oracle-query.nse
Description:

--
Patrik Karlsson
http://www.cqure.net
http://www.twitter.com/nevdull77

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/