Re: oracle database scanner

[Rorym Forums <rorym.forums () gmail com>]

Hi,

A couple of ways I've seen of doing this.

Metasploit has a modules called oraenum which is designed to pull information from oracle systems .

On the commercial side there's ngs squirrel 
http://www.ngssoftware.com/services/software-products/Database-Security/NGSSQuirreLOracle.aspx

And also pfclscan http://www.petefinnigan.com/pfclscan/pfclscan_1.htm 

Also pete finnigans site has a good tools listing http://www.petefinnigan.com/tools.htm

Cheers

Rory



On 2 Dec 2010, at 02:09, Ryan Giobbi <ryan () tgbemail com> wrote:

> Hello,
>
> I'm looking for a scanner that can do remote connection to an Oracle
> listener or the operating server running the database and pull as much
> information about the Oracle patch level as possible. Ideally it'd be
> command line or have an API. It doesn't have to be free.
>
> I appreciate any suggestions.
>
> ------------------------------------------------------------------------
> This list is sponsored by: Information Assurance Certification Review Board
>
> Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
> and CEPT certs require a full practical examination in order to become certified. 
>
> http://www.iacertification.org
> ------------------------------------------------------------------------

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified.

http://www.iacertification.org
------------------------------------------------------------------------