Penetration Testing mailing list archives

RE: Pen Testing a Oracle database. How to pull data?


From: "George Milliken" <gmilliken () farm9 com>
Date: Tue, 26 Jun 2001 08:53:39 -0700

Look for the oracle control file, it is a text based file (in Oracle 7) that
has the paths to the data and index files in it.  CONFIG.ORA should also be
helpful.

George


-----Original Message-----
From: Osvaldo J . Filho [mailto:osvaldojaneri () uol com br]
Sent: Monday, June 25, 2001 3:21 PM
To: pen-test () securityfocus com
Subject: Pen Testing a Oracle database. How to pull data?


        Hello,

        I am currently pen testing a DB server running Oracle. I already
got root on it, and I would like a lil' help to gather info on human
readable format. Is there a specific file/dir where all DB data are? How
can I get/convert it to Human Readable or even edit the data without any
external programs like SQLNet? The server is running AIX. Any help is
appreciated.

        Thank you very much.

        Osvaldo J. Filho
        osvaldojaneri () uol com br


--------------------------------------------------------------------------------------

This list is provided by the SecurityFocus Security Intelligence Alert (SIA) Service
For more information on SecurityFocus' SIA service which automatically alerts you to 
the latest security vulnerabilities please see:

https://alerts.securityfocus.com/


Current thread: