Re: oracle database scanner

[Nikhil Wagholikar <visitnikhil () gmail com>]

Hi Ryan,

Two tools I know are as follows:

1. TNSCMD.pl - A lame tool to prod the oracle tnslsnr process.

You can use the command: perl tnscmd.pl version -h <hostname or
IP_Address of target> --indent

This will give you lot of details including full version number of Oracle.

More Info: http://www.jammed.com/~jwa/hacks/security/tnscmd/

2. Oracle listener security check version 2.2 by Integrigy

This tool is same as TNSCMD, except that it has a GUI.

More Info: http://www.integrigy.com/downloads/

Note: These tools will only produce expected outputs, if:

a. No ADMIN RESTRICTIONS are configured and
b. No Listener password is set and
c. LOCAL_OS_AUTHENTICATION is off

Thank-fully, both these tools are free.

Hope this helps!

---
NIKHIL

On 2 December 2010 07:39, Ryan Giobbi <ryan () tgbemail com> wrote:
> Hello,
>
> I'm looking for a scanner that can do remote connection to an Oracle
> listener or the operating server running the database and pull as much
> information about the Oracle patch level as possible. Ideally it'd be
> command line or have an API. It doesn't have to be free.
>
> I appreciate any suggestions.
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified.
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------